Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 05:17

General

  • Target

    86086c9ab9a09fe92093d4797e7da1c0.pdf

  • Size

    34KB

  • MD5

    86086c9ab9a09fe92093d4797e7da1c0

  • SHA1

    100b12f231c66adb87882b29740c084324f4a8b7

  • SHA256

    2ed682bf2861186cb3cc603a8e39a2047c7ec8d2c8d3bc1228329ea65a704567

  • SHA512

    7370e1aebb8eecaf6be0d1a0a917858aea3bd4ad2ace831e85c798047fbdc53087cad060eef45ef6eb28e66dabeb1e9a2bb7a99353a4ae00beeb7ebf6fd07cc8

  • SSDEEP

    768:KiGwII6EsEmSF6mcVruzuey+7Sbxv3ICww61ygrNpbw+Suwo2cOWoqrYDGnB:KiGwII6hEmSF6mGuzueyeaFICF6guI6h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86086c9ab9a09fe92093d4797e7da1c0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          80b2010d282593fd1493aae8d3525086

          SHA1

          9779595c86d25add17da0826031418b475257b66

          SHA256

          6c99f47c180a88d7eeafc944ce31bc1e7b257f49ac09b4f33168bfac6ba393ca

          SHA512

          03647b6a94dfa368ec870ed23f306f72ef184d6fadd94a4a4b38ac73d68ab36cda88d8552102ab43d31c1b00eae8d13906abefbb18fcdea8a72716258cddf00d