Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 13:57

General

  • Target

    3b39f7c4ed42e1ff89c42bf9ef631fe4.pdf

  • Size

    80KB

  • MD5

    3b39f7c4ed42e1ff89c42bf9ef631fe4

  • SHA1

    e2fb7d01e61c3135252f927fc96dfd2c8158c380

  • SHA256

    20ee99f69b83ac59978ac67e619b8455d636fdf80f08b60ee1db76fc1bf2e90c

  • SHA512

    6bb2d621072cf28bf79497abb57ffaa501033aa8bdca3cfde1d2aedb432ec3492060eb89c0b5cf380c9c8675fe428c054e9bf841ca1fcb8086e9e9f3f605107a

  • SSDEEP

    1536:LJmdwhJ52q64sxa8Js75Mrth9mDY55RtuGGjgnSmtRlmrjIWoGu3eRiczqzP6Ww3:VC464QNJs75Mdsg5HGgSelKjYHeNKtSh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b39f7c4ed42e1ff89c42bf9ef631fe4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          6a8b08252509bed2b7b96be4142752e9

          SHA1

          493dd7c2aaf14b6abe951cc9ad1e0b1a69bdd7a9

          SHA256

          45efc07d7a0299f57dcc59ecd2d38dea78f0ec056ff9f7faefabadda3b220148

          SHA512

          63e6d7ad33efe19655fec0a8344d3140eabac7ff3691236bb76e28bd286a9dab266f91516a2019cd31c3f752e36e6c9664ff52665f7f6eb16079148f5d67e20d