Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01-02-2024 16:16

General

  • Target

    87551d39212e9042b42e6d11ff0abec8.pdf

  • Size

    87KB

  • MD5

    87551d39212e9042b42e6d11ff0abec8

  • SHA1

    c3ff2feca8ee9e719702e755f966a7dd527bc1bf

  • SHA256

    b8c1cc75bd4af735304e23421fe599f84535a6e7b824342e3a824a1d7e453250

  • SHA512

    14d5cac9ce9154e6da2754d70dc6e7a1c31f5c1a48737728d96336568bd9690b72fb6a45fa523e315de8fea295fa40f4a704fdafe849834d182bbd1508a21c04

  • SSDEEP

    1536:KU2yV8vdAN10RXsmeCniFRj9Tnvl/CgJOef/9HeAayYMg7xGtSM0WcTWFgDGzRUK:Ayi1412e7F/vZCgwef1Hekxg7ilc0P+K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87551d39212e9042b42e6d11ff0abec8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    37b86b7b4e8abd98f86a397afc35c344

    SHA1

    c04699639a2c7db14dbca57f942e51d48d65c43b

    SHA256

    98c30e417b058fbfc777c4146a14266d7e2e16db9d1d479d378620c1a64c3038

    SHA512

    268fdd65ea0e3865606847e465d00bebddcf33278e8fcc9db345980963c937ea188e0ab1b43f02729fc0b7dcf8d20809d04606820aeb8429ca0d1bb857f98e40