Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 10:56

General

  • Target

    8c27746950674b560bc34ed1b3cbb29d.pdf

  • Size

    93KB

  • MD5

    8c27746950674b560bc34ed1b3cbb29d

  • SHA1

    d6df0b98c76e618631da545b451b5ebc90050d92

  • SHA256

    b43fdd7fb93abc41fad75b875d422fc6b6853963282f138f177b12d95d0a7a19

  • SHA512

    09b5d916b2d455e9b811d6ed499b4d608d9740cf745fda574a6dd314325a0cc1584deeb221e3912f8fc33f3a5dc552ba4ebc9a67c0718b036d585871301c7f0f

  • SSDEEP

    1536:MZJUhBMeSQJBm4agYdCO1JhJ50Jg62M3yNDpzirdwOOSzXNhi0uJmghWJpRi9GiQ:euuYta2OF0Jh2UyNBiKOOohi0uJjUp9X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c27746950674b560bc34ed1b3cbb29d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1f9ccc6afec5b1e4576075b3b66a43a3

    SHA1

    598f27f0810e28d8991071a84ed23e9949ae998f

    SHA256

    25fdbf8170bbb96585016d4cb99332adf3ff381f86e1a6ec8cee1653229b02f2

    SHA512

    a8d1e97b9987ef67914f1c093fc6d58ebc2c51f45327a26f7f4f02e98e3260fda816915fc861f11f905408ec39a941ddebb9b8ee29c679b2a296d06917cddf6a