Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 03:28

General

  • Target

    8e1981c83bc432acfb7f7147a74acc4e.pdf

  • Size

    83KB

  • MD5

    8e1981c83bc432acfb7f7147a74acc4e

  • SHA1

    99be3b989e3fc853dcf0231b74ee1037777a5f03

  • SHA256

    98dce3fffafbe2557b94d393f52ae9d7a3ec89e4ea5a76c89446ca5f51d957e1

  • SHA512

    4cb5ccc16ed124f0fd4736cffe9686d74520b25dd24b02c7906cefdcae8b11ccb731d548474d2c335d82e1446f0b1b7a43f51cb1c038c0ee8f24b12d2dbdfcc7

  • SSDEEP

    1536:1Tf6dUZOaxVrzUE8RFdYd0J/2mWGxj1x7WvWIMGqOsWapOtQrLeXKkm8O:pEeZrwRrdYSJ/pWGx1x1BOdtQrqXvU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e1981c83bc432acfb7f7147a74acc4e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a402a80bafda63b4f8bdaf2f6fc00892

    SHA1

    8a7635ec49828449e4bd4724f892a18df1eb0d74

    SHA256

    62640a6ae8b4598366084aa320809634f4d3f2ea9d81f2fadac1d4206d006b93

    SHA512

    6c5c28622d934bd0165fa44de953710f00eedc7245a358841ccfc31d507acde082e02c3af5cd2285a9964861f4656ffc419539b71f4c2c38bcf54e73b7feddfc