Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 11:10

General

  • Target

    86bff4b8dd2907ab016e06039875f2bc.pdf

  • Size

    86KB

  • MD5

    86bff4b8dd2907ab016e06039875f2bc

  • SHA1

    8a756b12d8e64ee792af0ef6123845561776f799

  • SHA256

    f5a48453353e6e6e46b41a6ee6d2251ff97e5a5101a0c6fa0b4b9aef37f029cd

  • SHA512

    46316a240c15a2c982e423dc307581f8a50a9f12eaebf84c73f7b668185fa9e168264819587476d8747d7d858ceea2462d5f13caec08fa79a5352e79c0cde874

  • SSDEEP

    1536:tiIOmGVheNeQ4EU1ro5k4wU0CoCtS6gp9RA7w8mieR/rrbrsWGpOKCWxhru3ieFr:/XEYffU1ro5RTZ/S6w9yk/HhK/miqB7N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86bff4b8dd2907ab016e06039875f2bc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a39f74482e477b0c2e27749a6380c45f

    SHA1

    0d28c365ca43baf6fcf93cca620b47bfc1e8599e

    SHA256

    55374454b7f80e5def55f0d81aa6817f515672145945f87832129e80f080f300

    SHA512

    3ea9415a0914deae3ac111b06d410e4141ba33f092ef04ec98fa6d16ef148674d1a3ac804d8fa40e146784efacb15f204de8cd80618e2b3cf77fdcd9176758d0