Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03-02-2024 13:44

General

  • Target

    8c78cf55b42e52bd4f175568cb8916a5.pdf

  • Size

    87KB

  • MD5

    8c78cf55b42e52bd4f175568cb8916a5

  • SHA1

    c69a8636c56de83d5625fbf03b17bbfed6bb2070

  • SHA256

    e23faf64307d0612bb2b08e61ebc000c59b24f59ae4102c97b22c9189d34a8df

  • SHA512

    249a1d8ae05536c43c629980e04bf20994d216e0f9c75f4f130adb1616e32572b15dcd0f1d8439fd777e6305cec9b8532e306e341f28be8392bf3b25c1af4ca3

  • SSDEEP

    1536:TAucOuXufo/ekJKtWEmc0nCZQLbdHgTBIoUVZe7OCWCpOViIWHbXDy13JLawznQ:suA/pgWhc0CZ8dH2BIiKVi3bXDy13hs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c78cf55b42e52bd4f175568cb8916a5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    40600727d42e93ee5e782f0704f47ad9

    SHA1

    ebb6b3bad639b877a16f7c568019496b176fbc57

    SHA256

    f62ae12cb85bfc6886ab57184d0e02f5e852a91872f16093e026fc818af0f89e

    SHA512

    7a1962ab39cd2ae3651316d1f74a8ae56b389c783c4d4b81d76af47441d6313aebdd8fc034c1bfb5a340b6f7e0b94f050ec179e96167f9d7f5bad6fbca6f0536