Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 02:09

General

  • Target

    8b1e73689bb77ff0c898c88f1b0c4db5.pdf

  • Size

    84KB

  • MD5

    8b1e73689bb77ff0c898c88f1b0c4db5

  • SHA1

    38332c401fb9cf8f4be6eab7897e0337927ee00b

  • SHA256

    30b03cf34d57723a3fb9eff8f0699810c4cb9a077fa75d77c723748d4768ae06

  • SHA512

    c824d4059110d572cb262c75165dd345ac13557079ec122ba8186f33f17859e880511f7f2f89498a2bc9f774bea20859d9a56bbb37a8d5f57479ed315f437a33

  • SSDEEP

    1536:ZD9yKbOoaOj45+HUsuyvZYtqpD9PQsqwzd9aGi8TZ80XYVwenD4:l9Xwa45HEZ1DSJGiUZ8IYVwYD4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b1e73689bb77ff0c898c88f1b0c4db5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f4fe88c3750a36621772149347dcacf7

    SHA1

    5dfa14c3bf2d9ecf0e6d7e63c6bf6a1b476f353b

    SHA256

    f67fe95ab743bfe6ea0aaa4b94852baa8216d3005166b4de8680c8e49cba73d7

    SHA512

    3114ac9c8cb38b838acfe799ae304b5b2da44e3b2abbaaaaab7a25b2262c85d2a148c9652471738fc18e8b0496f45ab28b183a6448957222224b805289d43ce1