Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/02/2024, 12:43

General

  • Target

    86ea2dc61a317b0d61345a7959133815.pdf

  • Size

    85KB

  • MD5

    86ea2dc61a317b0d61345a7959133815

  • SHA1

    3c617e70b2435998d53a5147d88dbe8dfef7bbb6

  • SHA256

    32dc898a357e79dfe398af35903fa9bc941d22aa6d9a36495ab90b2d57144576

  • SHA512

    82f1099bc20ad4d464906f0babf469add6be7a130546836604a92c3e5712a0cbfefd43677d855c32a5e4ce7a52fabe3bfab599318b0f71c4af1b0c84841e6074

  • SSDEEP

    1536:sF/KIhZhfsKbGbHU0EBw9sUXfUwyadgG7eWYdckwT3t9jtr6hWQpOC4Qr:y/KIXhfFb0Bs4s0KpdK3tBd6YCB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\86ea2dc61a317b0d61345a7959133815.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2824

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8aee513ce122d926c9954e1849fdab6b

          SHA1

          91543fa0cf6123eefdb7f54db61e0b6ef9b49670

          SHA256

          84c9eb3c2146a323fa61a0ac07c8763cf1b0f79bf255914dd47b113bf8ed00bb

          SHA512

          66c73c0a38fe72bbfd095ffe8f1df9bbfe259d14e606a0ae007e0223225ad5cc3c7291d5ce124023a70d4e934544c71116ed724d4cb7f22071054c9da13328af