Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 04:48

General

  • Target

    8898821c218fc5d4d9d66e7f2f298967.pdf

  • Size

    35KB

  • MD5

    8898821c218fc5d4d9d66e7f2f298967

  • SHA1

    790de54f7d331154570630fbdd97947bfc28a8f8

  • SHA256

    944f98122140c3609007eac00a80c4079ba5794a390c4b494bb0b4af1718da50

  • SHA512

    c47eb8e0ecd93c0919e08cdafa17afc9ef75e3987ab7f615c949ea6a73305399144e772057be95d72acc7a8fc71c947476b4238bb8ece257e16ddfb32b74bff2

  • SSDEEP

    768:puyUHKns8/s4vB4AHVho//2EmnNjc3voDHwYF6NU:URKjE4/HVA/9mnCK6NU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8898821c218fc5d4d9d66e7f2f298967.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          01638fd8a5dd1b092eff728bc2ad10d4

          SHA1

          c4edd03a0fcef4d5f51441604f836d917158de63

          SHA256

          cfa45cecd8cfc43d3a4706d22821aae4e930178d6677e04b1b58c6880f2851c9

          SHA512

          f402ef261f271d0c64b0d620a74ba8e2fa6f5ba10f4a27d331ad4233c3c8f810b59f319342f59e6aee99e496ecc01bc3bb2ecdc6253eb9b1d10007d36c508753