Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/02/2024, 20:10

General

  • Target

    8d3d08d81738e55d069c444765022364.pdf

  • Size

    87KB

  • MD5

    8d3d08d81738e55d069c444765022364

  • SHA1

    cb86e40bf0f4ccec0ea43f85b787f929b5feeed2

  • SHA256

    3802bb0fc33156886c820b0d6f63fda6367251981212a7a8591829dd3d37096d

  • SHA512

    7a7e7298e61be814b23d209d7abdc06846b37e4e3baecbd8eee39b906a2396bca98a577e6b7f19cb597ee841001fba08138b5803b0d2114856f79b069121c635

  • SSDEEP

    1536:KiTE6Gv0fzAj8za6/KZ2XGo8U1789Sypuvbh7OWapOnT1TBYAUWHPYCFUxA9mw:W6GcfzAjmaKGo8sH8uDFn9DkCFU4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d3d08d81738e55d069c444765022364.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          2fe3cbc3df21b86bb828c180f99c2d1e

          SHA1

          42b98074e7420fe6dd08e349888b8e323b94f205

          SHA256

          1db6932a13b2449cfb123ddf24653a4d544de4c416d0822704b4ce9b2d537410

          SHA512

          b18e9f878d5cb46e79b76b53bb700dc4694e672d3871d5c414942d35857ba87ae0af87e4a0eafebd1126c533fbd23f9f5acf2ed7f42c1f0380e8699a734f335b