Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 05:16

General

  • Target

    8b7da2655c802c1babd35dc82efcaf9a.pdf

  • Size

    82KB

  • MD5

    8b7da2655c802c1babd35dc82efcaf9a

  • SHA1

    bddc6936499e73405f84f45e63854ca514ac39b4

  • SHA256

    0c5de1fe709757a50ac32d425b7747de22f8bebac7e33ac951534cf4292365b7

  • SHA512

    61f5c6266213d716d743fb4fc41d1b7de0b850483c6745ee79493ac66939d0c220206f245b982b6e767dba679522202b058192468af49452e964c05bfbc894d2

  • SSDEEP

    1536:xDa+pFJjEA5alk/bv2qiw4DHsqA5//1Ev6MWOXz9XTdYfZRx8WOpOSZWHqolZN1N:IeEVlk/bdAAojFz9qZSoqkGWIvFZxh8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b7da2655c802c1babd35dc82efcaf9a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4fc72836d7d87d999c9b4a1af7f95eee

          SHA1

          f2ccca4bebffa0ec05b19777485113553c5cd2c7

          SHA256

          503d508289c111308348670139d5d6b2bb33a60f72b46de095c9dea18f98a4f5

          SHA512

          ecee4c74b9a1b1c98b64fd869f35662d1228deb3c18e5011e62478ff37298b31b8e96315f40aa234f78833dea3754432ea80fdfc5bc54426b98face654eaf2fc