Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 12:17

General

  • Target

    8c4db17b6231b411537f3424ad2052e4.pdf

  • Size

    71KB

  • MD5

    8c4db17b6231b411537f3424ad2052e4

  • SHA1

    7188a6c482f75cce640f1fa46fa9a4b95561d486

  • SHA256

    a428aa406b84a006ef4c4d5f868d8fd7b078182a756d45b89f6aa725f979d5f0

  • SHA512

    bb2f1f4f3f6198d526018fa814dde52eb6fb705d60d62e6d79c5b68e7c4d8dc4483ba8f8af948143cbda41e507c0e7f91522fe761f9c0c2edd664d82b1897f13

  • SSDEEP

    1536:978YhyPCzSSx9I6U6dL33iInmp58POHIWSc0eqRLTJNj87RKgXsi:N+6eSHN1LHiInmnL4RLTJZ84gp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c4db17b6231b411537f3424ad2052e4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c65255955369d75d1c38b6ea57946f6f

    SHA1

    edb07730074147034b84ad7a967f6c74715d3ac9

    SHA256

    e8285fe06c7a145b5a09ea647568ee6f6e39f7e2f49214d418aa890d94b141b9

    SHA512

    25915e1b7cc97cede732b4b5bc63fcf3e796d34b0a4685acb5881852bad951d182abf0db8641fac2262569013317b22eb7bd4628bbe4f1e2a5a2255b3f4063e4