Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 06:40

General

  • Target

    88d320f297993bef845127cf5d85955f.pdf

  • Size

    33KB

  • MD5

    88d320f297993bef845127cf5d85955f

  • SHA1

    5339e2855d2ce9a3f71dfd5716f5bf65a47a38f4

  • SHA256

    6213d2c4061b3174436746fb09295ebe7a0463be275a023e6afcff8ca25b5184

  • SHA512

    9a8f7031428476ac59c65a3abaf7c4fb215717ae0a33a170253fb0853af65a4f0c68ed8901d2b1b69c1cf5b6db35eeb204a54eb03b2f0ee712ee2987b1a37ab9

  • SSDEEP

    384:CGRdzx5bg8n/vNNT8SsVWXgy9qRcCjEv+lhc4PsCUSNKCwPCfWHMCjMJCqY7ACUi:3R3jnxsBGCS+DQG7BxgpqYM4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88d320f297993bef845127cf5d85955f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2680

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          3c047361f0fb3dab3a360036a3b17378

          SHA1

          9d88e078501e4358e91d59f124530b7f53d53936

          SHA256

          1dc77826d7292dd0adeee994c90dc512938bff31e11b0c609e27fd916b212a58

          SHA512

          eeabbb40a24278b8b679b8bb021a517e6757799986f7c215f3784b1985451cc432731b09521e0f97c6fc4a4ee6a925577f660ac34418e099324a94ddfe8a9d14