Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 00:29

General

  • Target

    8dc266dc1d6ad65f0f1b5b41ccb2a493.pdf

  • Size

    76KB

  • MD5

    8dc266dc1d6ad65f0f1b5b41ccb2a493

  • SHA1

    c8171fd6c1708d2edd1628060fe6eca0584b7e6d

  • SHA256

    a5a83196328f09c754669eeecdd77794fab49d15836e64304b8a8e75a13b11ac

  • SHA512

    fe619a10fcea69d47d10da0e13cec569376eae482bea044b64a0bccdcc0a5471af2ff407344d8ddd3314a333fec859d4293f7c60b97139b5bd4e1631166dff12

  • SSDEEP

    1536:rotS3/iDA+slkD8OlDxncZQ/Gy8nOO/eAhLlrxV3WWOTZBO9H:0tJ/sWDxdh+VnOU9lrnPyBu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8dc266dc1d6ad65f0f1b5b41ccb2a493.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2496

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          ded881e84fe6d0d1943330a81a015c85

          SHA1

          e35dbe65f05a63b1337a920a3dca2a07a2baab0b

          SHA256

          845222dbb7166664dce85d8666f41b9dc5b7e1c28f69c3509cd3e8eca4e38509

          SHA512

          b4061a3239378494f0e2001ab2e28af41dbeb60a7ffaf1d6c5fd5fe3c7b3e91b1494496c4bb01648a0dff9b9e418cc3e2c36cbe4f11b8e6bb18a651164c11038