Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 17:20

General

  • Target

    8ce6b110087811ca1e7890bcb5c481e8.pdf

  • Size

    77KB

  • MD5

    8ce6b110087811ca1e7890bcb5c481e8

  • SHA1

    4fc7b98ccafcd5a7f45705bd6585c1a49d3bee34

  • SHA256

    46f548d5b2c95dbe3e9de4571bbc486ad637fa55417c4f152ba501ad7fc2dbb8

  • SHA512

    3de1007ba5246c37f3b46616789cc8641d7654cd02f3862c78d1885ca660d772b9936effba0328fb0345ac80ff519b812f67cba1fbf21d57b21f00a381b474a3

  • SSDEEP

    1536:jWLTVXOvectfSIgPpOWGAJ23n+RDIGv6V+QgaiqSSDtTWspORGWrkqWbzUnS8q4x:kTWDgROWGAY+RDDi0pIS2tyRqqWHh8x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ce6b110087811ca1e7890bcb5c481e8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    095e5de5ddf871b5a583ee17f36a77b6

    SHA1

    7864682250b91a0ccae0c74ed40076a0ee6ee52f

    SHA256

    6139ef6171b235378117dcde8d372aee6db87c1b143dc061b4c505aafac62aee

    SHA512

    8a5a30fa7e97309a729297b843e3bf7673771257bcb4af73ebd905b37848e74cb5dacaabaa12aa53766488585c653e9d0a59ef174f890c80c709b4a3fbeee4e4