Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 01:06

General

  • Target

    8afe341c7d4da7839482e180b27d4aad.pdf

  • Size

    78KB

  • MD5

    8afe341c7d4da7839482e180b27d4aad

  • SHA1

    a71f3135f922c0e54810f895209f5fb86a1c46cb

  • SHA256

    8526650321efc69492c0946356723db4da42919289b1b297a7524269d461650c

  • SHA512

    d1c44bc910718ffdac86ef45af20b21fb695808b8913c0ae7af86d44dee9ee242fd2b895b01ded57c9c06f064df4a7948f680415fca328e4521c786c37452732

  • SSDEEP

    1536:3h1BchuC/ZKFot6u0XA00joGHdbfzD4SXKW//OxYHw2niFKjWUpO9PpoTnQ/7M:xMhuC/A+6fcNzD4eYxZ25e9PaqA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8afe341c7d4da7839482e180b27d4aad.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7540f7195811b2b6acc24e6e64c7718e

    SHA1

    22b20e86f5f745a3fa6c3088f109dd48e119d099

    SHA256

    ba0aa2ebacd882a1155208422f5bcb96148fbbd9bae6b61fe1f01f691c19dab8

    SHA512

    ec516ddeb77c99c54f46a73b8ebcb7053a90e31accdb3f1fa75182e2ff49336bcd022fce010befd5ab676436bf5056a157fa80186b57908b014dbdf51b446719