Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 16:05

General

  • Target

    8f946f1ab770c94b831105a9c24e6353.pdf

  • Size

    90KB

  • MD5

    8f946f1ab770c94b831105a9c24e6353

  • SHA1

    3ffbb1ace9acad718bb999c0b95de9a8280a6be6

  • SHA256

    5c4615f0fbac420a97c6489d4b72708d7d94e5d765d17ba5b7cb2d7ba6b9b7ff

  • SHA512

    e83a12307f9dd03d2e07998d1adaf7025844728efcafbbabef17a11e78c12e31fb9039f8ed5595cfea6e0ed6a824cf1e49a3766d06e7e89d544ab27597591227

  • SSDEEP

    1536:n93fDB6XRKdMkhTfGzR4drNcOHQ2WeRsoy6TgpSig/RA7/N2eq+GPOvGWpzmxZ6q:d7B6hadezR48AWednTgS+h2rwLmxo3bW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f946f1ab770c94b831105a9c24e6353.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          81019487276b3a8cba23a4c6c96d9456

          SHA1

          1b31369f70b4723c9546decd71eb288bfd7452a3

          SHA256

          e96652d6a5d69a7f706e1a1cc8b3f1c9f3866a65d201233fe983366be5e19793

          SHA512

          d4ae43855d3dc7e8f149ad9ab96ae69664f88ae1a40cb130f84c10d4561671cf15d0f405b5bc3067f9653104850c454b83f1cb94d85e1db79227074201c46c6f