Analysis

  • max time kernel
    150s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2023, 02:34

General

  • Target

    3aa03928-88c3-45cb-99e5-5ff2fedeb46d.pdf

  • Size

    109KB

  • MD5

    d7be21fe259c3d01a422bb7ffbe0de32

  • SHA1

    edda49b573310d062c5a601d70953c6fd0c8b194

  • SHA256

    a970f3c9e43b38a664bad03cb1ace180a2cfd09eea0d9d44ceb8037c419dc604

  • SHA512

    16e296c8f40591df8e42b5b9ce5588ac744c60634e02cbe8ee04aebba491faf9487a9a2a212ba4841ff209cfcdfff1cf682f9b322628b9b841f3ee866bbf7b64

  • SSDEEP

    1536:WNS0ZMSpmwPFMt77kXUtjDL3Dqb8ZyLfBySbCyIL9GWdDII+fe6xjhqJeouPGjK0:GS0ZFmYMPjDSEL9z+ICw2+jTso

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3aa03928-88c3-45cb-99e5-5ff2fedeb46d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2340

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a777c4e6c80f0afb85f9fda29e98f48f

          SHA1

          a5b6d8d4b714f2cf81404e9acaae817a3927f802

          SHA256

          0f95682af84fa4cee20869252e3d959cc3e7a2f1cea3da7be24fb4fafdae2082

          SHA512

          c128e5ea6b205bc944b6c8b2c37173f327edcab05930c44ab9070c6b5a0e8aaf2a057819c72a1ec5bec44ba79339be4b57ae6570071b6c0f8e38ef7b083e541b