Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:55

General

  • Target

    3aa7b6a10b2650fe492c9b3b94bf7ecf.pdf

  • Size

    84KB

  • MD5

    3aa7b6a10b2650fe492c9b3b94bf7ecf

  • SHA1

    6bacda5075a5f8b67d04994473bdd7c366df84e9

  • SHA256

    1433c79eaf9e662f9334e6d593783fbfea0e8789d8c13865307f19f12d4b6334

  • SHA512

    bc5ccf7fb8f9d4b8297a1762651847eb2ed1aaf2df013f1e614179bd0f245d08bf132e9504b658b8bddaa477960b2c1596e87260a84b5efd97556e4919efa147

  • SSDEEP

    1536:2Ls5B9qTD2vJ50diXJACKvWhY2XYh29Cg/iL67WLiUJVTaGWA3SyWWRWepOittm:R3KRCQWhf9CL675UJVmstZuii

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3aa7b6a10b2650fe492c9b3b94bf7ecf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          685a143ff412d40f36e84ddcb36002a3

          SHA1

          06c30875e543097db3e6a82a7b4f4b0a0122d46e

          SHA256

          bae5d541f97cbb226c88f4c1456a3da2f381625d5fe8078410acd254296d0053

          SHA512

          e4188c1728d2a3954b974eeca24285e078af6236caffc33854160867d5461d9f4440b14520ee0f452ffca2b39fe0e31bf0c7d58cfcac8e0278ef02f49bdf0d39