Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 07:44

General

  • Target

    88f49cbf7fa894cb0c0dc06cd1bba76e.pdf

  • Size

    82KB

  • MD5

    88f49cbf7fa894cb0c0dc06cd1bba76e

  • SHA1

    bb4cf01ae83d6c6f2ec5fcbcbcf5a22ffa533355

  • SHA256

    c434e53409617fb881f8f255b096648df95535e60fad2c0c15fae5e45c473a45

  • SHA512

    a81ce9f491bbfae1aba98673d7c6cca3e30a34415ac3237119b5d26a5eb7b03d001d9389e5f7ceb42448c0dd9b3ab5fa994867f464f7f3eb3ffd500e857d72bc

  • SSDEEP

    1536:fy+mEsTKPMppiTr8QJf+ZIN+wvx+oWgpOGQPuaWwgWQYYKje:3mzKEqTr8QF+ZIEY+nGMuKlQYYT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88f49cbf7fa894cb0c0dc06cd1bba76e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81dfc5d7fb3e99b348a346fdab7b40dc

          SHA1

          ea6f7974ded8181f6ed37a7af2d8c6c18b728d67

          SHA256

          efdd17b15c3c0bf013bc34dbcfc69b1f230782f7e6722c869283d91b3ceb930e

          SHA512

          07fcd71fccd7fab2b5ebf650e1b15365295faffaf4500ab46997f154f3ce14d5384284332bafb83b9285e42a734c5fc19e90a986a334dfd35df9ff5698d009f7