Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-02-2024 10:06

General

  • Target

    8ee000b216d29d2d5d7000c8d37a3565.pdf

  • Size

    84KB

  • MD5

    8ee000b216d29d2d5d7000c8d37a3565

  • SHA1

    1afada249852187022db9ae1ff2fa18a788ad83c

  • SHA256

    12690035ac2fd9350d082f3ba4c37f952b1a6ed63822927afdf24b3b2133b384

  • SHA512

    7daaaf3c2ea2301aceeb927b220838878ad67c79353a135549ccc4301bcbaab7fbdfd1b70704e08b8ee619c80ba7dc2d77eb85ad71a8530405ba269623ec32f0

  • SSDEEP

    1536:eeZoYjgmgwlpmx09bV/x7zWiSO8b7rE91+QoNGluXWxFYo1JtUW8pO+dwr:RRXxlpZ3iiSVbnvlYFF1Jtv+K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ee000b216d29d2d5d7000c8d37a3565.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    427db9cbff03327e45c72b6496e58f2a

    SHA1

    355fcb07decf4e78f6c4410695873da9c79c458c

    SHA256

    43439103faa26477694522f21c85d2e4e1313c3734733dfd866bd4fdb9925637

    SHA512

    bcd156ee99a10f79e4cd86ead830777fdfee1db77fc967fdedb219c98c685dd2ce36faa295bc830010238bda298990c4962a85a5c9f499589a79974db69a8f61