Analysis

  • max time kernel
    122s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 14:46

General

  • Target

    8f6b60e58aed2b22fc49e14826d45f98.pdf

  • Size

    92KB

  • MD5

    8f6b60e58aed2b22fc49e14826d45f98

  • SHA1

    7abe33bb4ee5f0206b01ca091d3f53beda88befa

  • SHA256

    5355e896b55cd4435dbf3e3fb8db70bbce0e61f5f94d2637718a96b57e91fc93

  • SHA512

    f0c56960a9e2bb592c8351146a7118c37e096166c6da03931b566b24bbc0bedaaa1fcaedcc9349963cb178b1108d60df51688d9a7d33ce574973837215dacc4a

  • SSDEEP

    1536:sDKVnmJbyti8wspB6sPs8bub30wlQEC6a0fWmX/tP34T/RmsPSWUpO7GeB:6byti8wsOsdCbkwDC6aq2XPN71

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f6b60e58aed2b22fc49e14826d45f98.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2424

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          767e56aed6745c51893e35422442ac98

          SHA1

          e5cc19d12056b93ec5dd4be9698fad8e6873b6d1

          SHA256

          48a93d5d33ad968b870ee610f04b9b457d451e228ac074da5d7e8f72e51c49c2

          SHA512

          637b5bb14a73e13bc3adadd98b562e9efb2e1205fde4b1865f2ef4c652371cacc6949eae71734c737ae9fecaa838ec5bb9f8399875f0d958b3307cf4591b0d54