Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 10:08

General

  • Target

    8ee0c7c4213e66fd17d1b718b2466ed7.pdf

  • Size

    88KB

  • MD5

    8ee0c7c4213e66fd17d1b718b2466ed7

  • SHA1

    ba34eebadc5b3f73e8758c0d3e47d0766a3659d0

  • SHA256

    67b037bc10279e11a4d3d4e7846d8ed0ff460ccdaeef52a76d1161e7d8650942

  • SHA512

    0e53c6a43aa975c821d027362e15d20e28bb4c6c56fb820226cddff7becb675d2e87483029389ce840bb2f7acd01015b040ef3d85a4c6b177b50de48678cbff0

  • SSDEEP

    1536:4wCKpKwQ/Ik2u31/n0eaRvu48B9kPT2qRr4ZDBjpHqWwE2buD+eKqWQpOCJHE:XCKUUS1/0eaR1K9C2qZ47NHaE2b6KtCq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ee0c7c4213e66fd17d1b718b2466ed7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6e27b163fa5dbe5b8a80b1dd9ccbefbe

          SHA1

          b15ef83b51c88b0172a3476564fce203602ef44f

          SHA256

          a7683d1a33a04aa073f9b89e79a355fe80193919c68a8ce7bbde956633020543

          SHA512

          0a2bd66bd61f3de08ebd4fe84b0a1f933c048de9565e7878dd5747ab1f83473ba002f2314b34bac8e6c61eed2f8ad3b54133f72d2aa9976fea8ed87e5fe927bc