Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 16:35

General

  • Target

    f3d055e2f20349c90d0ba2c48c644a43.pdf

  • Size

    34KB

  • MD5

    f3d055e2f20349c90d0ba2c48c644a43

  • SHA1

    9ec50361ca59f2e46c1c829bbc0fb3486d16d04d

  • SHA256

    60a46ba7a6247e4c5c8c2ba6cfc5fcb905424a3070975b81b889d881705ed589

  • SHA512

    8166387a3c4098856d01c1872ff0d089df885baff2000f587475ca9532a2fb022ee87fd55932a69c1c4a6ef496ae8148fc95eb6097eb6a3f2bb73cd39983d5b4

  • SSDEEP

    768:sL7miZnZTGdvEnp8v2lglKYP8ONkScpjisOUiEi6eqqOR/43FbR:0xn38v2ylLP1L++sOytqORgF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f3d055e2f20349c90d0ba2c48c644a43.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    59cce3f796cf63f2757d7505e0d21de2

    SHA1

    92fedd0a630c930633d25b45e35aef32948a4333

    SHA256

    f4915c70479f325e6b742161f771360f6ffd24b8ce154635df448fd88fdf64cd

    SHA512

    e4c855b076b68acd9ee52704fb1008ff30e070928c8d0a115f59cb8fa766f52d38d082a7f01a2e34493ed547c0fbd2020115a550ebbffde4cd813c411414e924