Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 10:15

General

  • Target

    8c132d883be9a1e4988962f661eaa4c5.pdf

  • Size

    81KB

  • MD5

    8c132d883be9a1e4988962f661eaa4c5

  • SHA1

    1dbe75e8694a85bb64e048e6e54f717dbaa8cefd

  • SHA256

    ce34be7b0c69fb7cf54028980260d998dc5d20e5df3ac2ae8d7b3f884728c239

  • SHA512

    539e5765d987c36b508eccbd1955c975b0d04b57398916fa530b8aec55cdde24d354920da71ade77cfdda528320748cd3692a22a46c0a3358eb48e04a9ccaa16

  • SSDEEP

    1536:lVd0wkXX0ZW5A3TZpeKqgufdwsnkrWNRlNsGWapOtQHWel61/:LcHkWmemIDr/l+btQ7G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c132d883be9a1e4988962f661eaa4c5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    be050a19b909bc2b8587c12f3f83963d

    SHA1

    f9ff217272814f83bf6046c9792763beb20894b2

    SHA256

    d8c92ebecb85277dfb17038148c388d22ce8ad4eb4c4300763eb82c1a91dfb68

    SHA512

    542e0d67133b970e3ced6594099578db8ae8543a62955a78023dff21d66577b4a6854f5452a3190d03fb457357d01709a4ad219dff201f4c422099681d4481e9