Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 18:07

General

  • Target

    3340dac31daa2630c92a8f773f0850b5.pdf

  • Size

    9KB

  • MD5

    3340dac31daa2630c92a8f773f0850b5

  • SHA1

    146ca7b0b4b5c4fcadc853388bc1b39ba35d5b69

  • SHA256

    dfa3e84e4a1d7e92d0b9686e816722616162cb5906b6c271733c09e09755d904

  • SHA512

    7dc917791786b93161477ed745cfa8d4e87f560830c37e987cc70f3a89b437840082ca48b8c5d6bf7bcbcb297d1236896c552181b6c70be9153e63fbbd4731ce

  • SSDEEP

    192:GEUlq/TtMGZCPXxAgyecfHgE2EZGkiHAgmKkhjs8hbBkJM6C6hS/zb:Ilq7tMGZC/GzVDiggmdjs62M6CUSv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3340dac31daa2630c92a8f773f0850b5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2516

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4b7dc83e53e39bf9de00625c282d2631

          SHA1

          c60af01d493cbe566fce5076666ecae408a6861b

          SHA256

          64cce0d6b49d1150d0d816dd5a4236e2249ff580f4cc74d35761acb802766a60

          SHA512

          b21931279eee6c5fad38f01feb250217999105d439ba968bb945194ffc240364a6637c1694d106969ad75937485151ec44fe3af2688e46f3ac8e0f23f580e265