Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/02/2024, 20:02

General

  • Target

    8a68482e5d33f813a6471a3968f9f257.pdf

  • Size

    85KB

  • MD5

    8a68482e5d33f813a6471a3968f9f257

  • SHA1

    beaa92e2bf3407bdf8e5dfbae67a605536862b85

  • SHA256

    95c77e2d71d1ee88c3c365ab014530472c3a065c927bb6bfce318c701fbe4624

  • SHA512

    f6b83bd7eb0b50a3da6345b7b2edbe339fec138a9b780e14222a1282d420ddc9a936631eedb02288278b4e6b8598bbb8630c046e065ba103ef8e781d86a1734b

  • SSDEEP

    1536:EjuFhTc3nP2gUY5jfaQt1eVFTmy9+cJD61MO35NUWSxKRwUeyybKWspORFn/:p5c3qWjXQFTmybOD2uw4ybtR9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a68482e5d33f813a6471a3968f9f257.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c184af11531c2d5cf9880694bd807bde

    SHA1

    eaec58d7ef21326028496f1bb88bb28b81fc1740

    SHA256

    7351f81031c3dbdb1307cc90b40d70b7d6cb0d80d98bd1222067b576fb1ae391

    SHA512

    cec0a5cef2526bf8004996cafe9402133cb0f48b8d167ad4b2440a266ef9e513fafc7a395df02bb04260e8f1ecfefdc0095cd48550260f4f46c0a6bc3b15e30c