Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 08:04

General

  • Target

    88fd887eb63ed162e129ce05cc59b59b.pdf

  • Size

    90KB

  • MD5

    88fd887eb63ed162e129ce05cc59b59b

  • SHA1

    7b2782b94054779ecb191b48e990a54737935864

  • SHA256

    4347ec2966174fe0d33024554600ede7563f616800a3588d22ad62eebf905710

  • SHA512

    fa1bc90204378ed3e3159f8a6ab9b9204260bd378387bee779b11c8e021f8f142e3883b5b9c5b243872923246c10e4c8d9cb932348ea912213f8b406fc85c94d

  • SSDEEP

    1536:WvKv5eJ1rAmGCZM6Amjh0vHtP+9usMmxOcEv+GWcVWl7w01DG3D8U4LcupfWUpOH:9ePrtGyMFm8GwsMIVEv+wSP+T4Lnpy7D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88fd887eb63ed162e129ce05cc59b59b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    561d561408b8c874840d7668425858fc

    SHA1

    75745693cad18f6c436476a6e84070225c121414

    SHA256

    e467a7d272db9d32d0169ed7aca640354c569e2eaf4b86659715c1904ddd2751

    SHA512

    401a3420926fc3681f5a55746a9443cbf3403a4ceda9bbabe35ce1eafc0cc175faf34f34c5e0a75e0ba7864d1b22c5f3612fa4613fdd616943cca1df2885c0fb