Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 16:17

General

  • Target

    8cc6bd3f724d0b96384b2cc72516ae29.pdf

  • Size

    42KB

  • MD5

    8cc6bd3f724d0b96384b2cc72516ae29

  • SHA1

    e338cce373aaed1652cfbac4ba7f50bf9b844995

  • SHA256

    f4cf7245b73de73ae2e6a25e6ca63d773c60e0f3a4336297692bacc6fa3964e6

  • SHA512

    d8bdb163e90a62fd87931f8f94723cd830d4f1fae84930d676c01095c6bbc309ebe320812f3af378b30ef6f37a04306f3bae784b970665876672f22d42a78560

  • SSDEEP

    768:XMO/pHyrIJGNvf7mb4MHr6Za1ImqFg35iEMGwTYkAZjfXMWirfUCOwts:8O/8rIJ2mP2tvFCxmAZjfHwts

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8cc6bd3f724d0b96384b2cc72516ae29.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    540b85d1e01527d70914b642878c7849

    SHA1

    7747832abee39f00a81dac195891934ed6fc51ca

    SHA256

    eb66682e692fa7bf4275656b05ec791dfcc2f6b0cebe1f8e2710c7a63649a209

    SHA512

    005850a38aef03cdf458f05cd36da2a85077aed15bcb1a6a3214b29132d1498c644a30b84f4de5a465b9c6a20dfebb65940b8b3be64af1b0ccd9274e321539fc