Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 03:40

General

  • Target

    8e1f1ec61808f1b5a74c2eb29182273d.pdf

  • Size

    89KB

  • MD5

    8e1f1ec61808f1b5a74c2eb29182273d

  • SHA1

    c7f84be0fe6113494fe8988b3f1d010d394ab0be

  • SHA256

    c2f06179d405a713a3721e7cc6dcf196d2926c33ef202ac2cbd267a28c1fd562

  • SHA512

    a68edcb9c0f98ddb3af311a509ab8e2fd8a7060472906fd6c9f27ce810a91a0ad1eb0fa974d8c5971ae2178c2b4f8938c6ffe58bbd2f1cbe2bd23da47b8781e6

  • SSDEEP

    1536:efHsZAxHa1DeLDygKTdG26cw+roVAQhkXhKMaU6RcpNWHpOvWLfy26WpmnRLWQdU:KMZAxHa1DeCgKhV6c5roVdhk8MaU6RcI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e1f1ec61808f1b5a74c2eb29182273d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2668

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6759d4e90944ef364f787d8ee0c0b9b4

          SHA1

          47d7f49db96bf65c7c1a31c6636f4ebbb1aaaa99

          SHA256

          830f708fdc711d0ef6adeb2bf76ae08d7d2519c2dfed63ce675105d6790b812a

          SHA512

          0982df874202efcbf848ff0ab80e8a8b191613e8666584dd972179baa56b3165fa042bcd403c7fcf7ab20a210ac9ac34c551b28c637920844f3816b054504505