Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02-02-2024 06:07

General

  • Target

    88c18d366386b345dfcad7850569759c.pdf

  • Size

    94KB

  • MD5

    88c18d366386b345dfcad7850569759c

  • SHA1

    b724e8fd6abd128232244234e7ace9755f865e46

  • SHA256

    1ee7d0e9a23800c68c5fe97dc908fed6c17a1fba3c9df92ea77c48312ad3b188

  • SHA512

    12294b12427b913e7581c6efa5fa147a24b9bba8c0338eac651a9341b6afeb9f211d95b97f218b06fb64e4894e8d9160bd686b81862590a3beb2d5b74370b4c7

  • SSDEEP

    1536:Uc4mkdjbibNU0fA9zlMZYZ6IQfCcjBJe9ChaPXRCDyQOmrVWt1CrWxApOGZYrFB7:/BCibNU0wGQQacjHeN/c+QOM+1C03GZ4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88c18d366386b345dfcad7850569759c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    96f9605cc0046912cb4eecf9957dc6b9

    SHA1

    7c16168d21bcaa965c44e93533ab8a48ee4b6680

    SHA256

    ef44e7b289cb39fb230639bf6e745c1c9969013ca7a07429f9c98360607432fd

    SHA512

    e8cd5db1fef4dadd4da7181581d79ee5ea94db6d1fdb67ce7fb66401b405fb14532fe3005bcaf40c60b13dd3d5e2c5368734e5a083b0803587b1a92f66ca07ee