Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 09:40

General

  • Target

    8c00ebbaa5bd22e93c6b1f235d7514ac.pdf

  • Size

    86KB

  • MD5

    8c00ebbaa5bd22e93c6b1f235d7514ac

  • SHA1

    4d7b5b98910ce09367f0bb007384da3d84a34b3a

  • SHA256

    2286f1ad26d52918ff01d18d636f44a988eb6ea9c8cd60f9c3aad74b268499c7

  • SHA512

    2ceadab2c5d36a1d101d200b7c1c43add248578b880c84f72928c7587d475f4d1f5f7ff7c88aacf4a4170779d361fef4b73e165c6805a83691be7d7233b58759

  • SSDEEP

    1536:qtrjg0uKaywf2/Q+yPkwovL3I5a45tU3parg97ip9IblWSzTKk8hCjmW6pOu2XmR:j0nV/ShovbOa2U3pKg97z5Vjju22j3PV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c00ebbaa5bd22e93c6b1f235d7514ac.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cd88cec5b25a7dee760b70078aa470dc

    SHA1

    80a89c2b914272e192ffa615ddfd7f1740bef5f6

    SHA256

    567baba98fd275d1e2849be90dd58b83aedaf07ce817f3c83e41a5ee6d715934

    SHA512

    db364c733c3b0b65da6634612c31bf33e7f5e1e07634def7cd0fb210a3687c11ed12efc7bbf7861d9c16309d4a2fcd13b568158ed324c18be1bd4cb5933b07e1