Analysis

  • max time kernel
    120s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 22:14

General

  • Target

    3f52420f13c69333e96539b49f14f871.pdf

  • Size

    75KB

  • MD5

    3f52420f13c69333e96539b49f14f871

  • SHA1

    480582bcd6154eff0eec2c5c33851a92486e80ae

  • SHA256

    dee6bc9a5271ae4065b5e0a79bb207d728a54cf9e2bfdeea9c7194657d9354a9

  • SHA512

    0155020f7e02f381de69f5ac4318ac5f59f3b652584649e7f2f2476fc1a2beadc5a0ea251d791551359cb6d9eddfaa6a9180cfd00a66a4461e432ab8e9e48f56

  • SSDEEP

    1536:ZyWvjRj9drn403eCsWjLmoIYGmFS9p+1WcpOydWx/JdH6qD3HzGZzf:YKjRzrzelAIYGmF8pJykmqD3yR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f52420f13c69333e96539b49f14f871.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          12268d6984ffbd508775622860f64b1b

          SHA1

          8c1f0f582cdff2a5f20e2cb8c6fc20d10f5be196

          SHA256

          421aa31befd9755d650e8fe44d1c42a6eb7335c506c7394f6eabb9a4f663fa4a

          SHA512

          a670d0b193dba8e0068cf1dcc87c976d88d93c6dea4ca1af0eda29eccd33fcc5540df0deccef45e9d2289bfb4d7ace0baa7c2c491761ef0444ee5d986921d420