Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 21:41

General

  • Target

    8d6adf2a1573776218e3b2f9da3ab506.pdf

  • Size

    42KB

  • MD5

    8d6adf2a1573776218e3b2f9da3ab506

  • SHA1

    c89e34a9f746cf08dc70e39b3a2575fa64c60aa6

  • SHA256

    36cf2ce8a1ccea924e9c3038a8cdff4b06aea43f0bd222c356f10d06d0c0a193

  • SHA512

    17cbcb1cea454973e030063a506351a4adff4068e5036084148c397b900c53bb2a62c3fb4346c2fc326f4949b7f85aae3b983a4b7ce800ecc8f827ea06bb430d

  • SSDEEP

    384:wKKRVvBTjI5hPwVDg1qp7+vOaLT2S9aFjPlMs1mK7l4/upV/agsdJIu6jCUS/aP1:wLV66VDFO/o5KGlguL+JHYlnkJDs4Ot

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d6adf2a1573776218e3b2f9da3ab506.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7b59f4d6f51e14acba1ae824a557c6e8

    SHA1

    eafecf50aab75251001f873b5e6778c5feee6b63

    SHA256

    2bd0aa33ba6a39a4b6914f8761fffc4514833dfb562c8bd9201a7257ac7e6be8

    SHA512

    98d40497b37f4cd0b5512f2b2407134cd260451588e5969312544e26d0afb04fe30f0a0658ed2d5178d9d5bc1e937106e9a1d0d428e300ef49059879e2462e72