Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    14-03-2024 13:19

General

  • Target

    c8b61654ecb09f9d8ede24b401a07725.pdf

  • Size

    76KB

  • MD5

    c8b61654ecb09f9d8ede24b401a07725

  • SHA1

    813c3dad329a7088ecb2909fe967bf59effefb96

  • SHA256

    6cfc18bc876a9bb2b3c555e826487f207c49c2c4cc033e500cde64602cc58bd4

  • SHA512

    d8d74481fb024af29136dceb37726502935b217e2fe7358219f41125d4f1c6014e7dccb868b08a8b2b6b58d716a880d37d001e4c3be3a67eb4285666c64656c3

  • SSDEEP

    1536:g81xWXsICkg0EpPPjnNuwBB/huQO2bGRKMfhhrTH+kN6J/02ZfMoJMDQeszPkY:2BM0EpPPZuwBB/huJ6zMfhhHkGHoWszr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c8b61654ecb09f9d8ede24b401a07725.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fccfda7af1cf6b0b53fd2dc87b5a42d5

    SHA1

    4a1086d780cd6312ee0a972f0547b20d7d3411da

    SHA256

    868650fe24f448f24e099e72677f0b154d0744cd86eab799f5bce8c5c1c4d7e4

    SHA512

    358a396e42d9c06b9c0195ca664de708ab764ceee7cf8aeca190c35f07428e627ddd7c5aeb9ca3ab4c50d6239a036d3cd0c0a7c01d61878ec00645277d0b7bd8