Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-02-2024 15:28

General

  • Target

    9c08137932b76e3d70e584001f0013ec.pdf

  • Size

    89KB

  • MD5

    9c08137932b76e3d70e584001f0013ec

  • SHA1

    b7d3b69986f3ad1823ac89937efc168770082f37

  • SHA256

    21d7acf84bd26db01ff24e09013a040e4f1748f54f14e1d4a096ee726210c61b

  • SHA512

    c9894206da61bc65433669872662e52d194eb5ddb9eb17c885361355396b0acaa7545644bc64fbf36a473c7a21bcf8665a541cd0192cae601a1faa2c7906146b

  • SSDEEP

    1536:wxeR+ExMO1pnGl0gfxUyPtRMVMXQudPItxlaEJcczEbwCRKHWxEDrYNKW8pO+JuN:yeRmO1ufUWtqVMX7dPofJcCDoEfYN1+y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9c08137932b76e3d70e584001f0013ec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    63e03d4a65428222abfa182b0a9f9a8e

    SHA1

    875320842b9bfa844d76b7ebdeb6c7f2edaa0c21

    SHA256

    c86544793c825e66e59c0f9bfd32e6b83698e5c3d79d74f425eea3eb6e1210b4

    SHA512

    8339bf9f3919ed29ce78046c48df7f90db3d8eff33001bcdd87b531187e121d80d22594ae6bf257b6453c32d10844fa822cf2be46a2614e499085c65b7d79382