Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:50

General

  • Target

    3966aa60607ab6040d2dc41e9c4775ba.pdf

  • Size

    82KB

  • MD5

    3966aa60607ab6040d2dc41e9c4775ba

  • SHA1

    3ae7c2ad50ba90c50b5115a402258514610896c0

  • SHA256

    8c1422cc2b6a949b0852e03c8f78a84b213b71a174d3920b740437776637818c

  • SHA512

    9a3a1d73b997b646158f30405d0cc4206fcba21a64386f21a8da07a816a69aa63dc834b14343b60d748259db2a72c68f2910dc72265796bcffb46371c107233d

  • SSDEEP

    1536:gwOUQKcb2iVmv61vvYeHt89yrmAirhHjWaVWL7fvTT5/WepOZgBHwwGjXC:eb2AW61vvzHt89yrmprhCaKXn54Zgew9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3966aa60607ab6040d2dc41e9c4775ba.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          872281f28306aea25fbba3a1990ede4e

          SHA1

          d88f08321663b3f6c814b0a1ef6173d0fb831376

          SHA256

          8c2c5ae02de7cb58c2d51212a81b340c4fdb962938d66add5872446cc9e8e748

          SHA512

          2cb56a0d6a6766b59e32032cbb6173ef061b004ee6c552d909ebf4084ebab734a7ca920d0323e2b92eabd71924e6bd8d2badcee3422f6560462cda00cf93e16e