Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-03-2024 13:39

General

  • Target

    b8dcea52f930f64baa84755b61837ae1.pdf

  • Size

    84KB

  • MD5

    b8dcea52f930f64baa84755b61837ae1

  • SHA1

    7f993b4c2bde23c341f72903b33e3e489ff34b72

  • SHA256

    56e32725365fe4ccdf884fca1789ab3c7f996c4f2fa18dbb319a808ad4dd8e70

  • SHA512

    558a5f879f77426a475b4af66bd95445a1826c8e43663f533fe0e14eb3f97c52470c1adb832037c59cb3e310e4e4091592ba7826061d7d37cca3d6b5c46ac4e8

  • SSDEEP

    1536:W53AlfCVkG5rE9xgI+2BV+J1cThVW7sGVdRwwzfDrNSciO+4fWWtjwSP6hxpRCAU:fQamUg92+0usIR5nPPrjx6hvRCAtgaWz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b8dcea52f930f64baa84755b61837ae1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    63895ce66d9eb693d006f330f74b0e9c

    SHA1

    6a88edd01a80a4b07eb40a2a4ea079a63200a917

    SHA256

    7e5bc8c16cd63814b04a65f8a342d98186c55950b8722d8fb45a5ca690c6f674

    SHA512

    95e3b6a44518159240e8ce44cf03c62fb28126bda6e2e76001297b7b02f83eb93f6db081952142094f73fb6e7cb08bd6cf6a38f1322631237126598c4cf598cc