Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 05:50

General

  • Target

    8b8e749dd403eb91034bef153d6c6a1e.pdf

  • Size

    82KB

  • MD5

    8b8e749dd403eb91034bef153d6c6a1e

  • SHA1

    91524ea33b69367508158897d87b49d533b21aed

  • SHA256

    948d67b22248fa1bb5cc16538a8d08656a830be7898da970c7ee354a93f07be6

  • SHA512

    408993f76606e21163793ca72846d9bb897eecb78f40939d5511387df07fcc01363f4f5cc272150324b402cf04ef1473b43341ff4c5ce73e9d37774e01191c1e

  • SSDEEP

    1536:19h0FnqjD6F1kmB1JQ9lU8JTPpn2Yom0TcbLIG1Wlb/0clZWbpONoA5:H+FnqKF1kLU+Thn2YommcbLlsb/0clbx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b8e749dd403eb91034bef153d6c6a1e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bc8de5be77cb60200a1a0149b1bcd5fe

    SHA1

    debc400e628eaadd6fd17c253bb43d900a906b56

    SHA256

    c3e6512e797973c281bf3960e5b8b67cd622abf1888bc13c0c4ce4d322e1ac78

    SHA512

    5c83a7d97e3f44019ae17b7793414452416c9fe65226909b54d782247cb71eb3d7a4d1f09d0694af53aa0ed021b40863ccfe969896dec24c0630c85de2468b35