Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 15:13

General

  • Target

    8ca739fbdc96359e78561111cae084df.pdf

  • Size

    83KB

  • MD5

    8ca739fbdc96359e78561111cae084df

  • SHA1

    82f92d97c79aeaa5a20974ee3cdb3904615a3ca5

  • SHA256

    d5558d68396d155fb70697399fc97a8be221b970bc1cf3af1e7313eee6d9d525

  • SHA512

    98aa16481cc221b515013a98c46c72e7836183065a8c2d28e24f878e845ab0d1575fe67d74a12f1ed3bcec5017422b5592e5b8b98f49ec2757f7c0a04cb1b435

  • SSDEEP

    1536:v1ywDYCR1BaW5v8gqfTeFzPH9FMjun8NvZiYeD9X5g76pm7YydWepOyK1pO3nGat:4wDYw1BabgqG/9C+8Z4xD9X5afYymyN/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ca739fbdc96359e78561111cae084df.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:624

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ba1fdbaae1b97eeedfc3f93818d9a3d2

          SHA1

          f130d7488fe44b41879efa091e57abc42579ce68

          SHA256

          e5aa738bbd739bef2d3620db39e60b551e951331b4fb6b5465e7287d32ff6054

          SHA512

          fd40f07568e7f6d606b5ae65f7e30b9c265dd2fa919f77ec7dba9bc60aafc23c01f6ea9c4fae82df2d3d3148bbb040302c22f05b2e63616179ae82e8ec180739