Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 20:21

General

  • Target

    3b11a17b3ffd1132764edf27ed877fbc.pdf

  • Size

    92KB

  • MD5

    3b11a17b3ffd1132764edf27ed877fbc

  • SHA1

    c35d112484935ff77cbe9ef3951f5ff0b70531e8

  • SHA256

    c58bc01d09ca49237b4060a45f0d044414a424b8c88d879751e1fe23a58b2108

  • SHA512

    58d9a03b1df3817c7049b230de6e504513b5c35aecc31e58f0aa1a789d901e049be73ef2440279d73f03cb3a129b848f073722ce80a01158044ff1ad13575779

  • SSDEEP

    1536:UZPvSoXpoPBaOrzWmAb75OYcfgA2txyefWOpOaZEWXN7e9AeWKo5XiouO:EvXp0wOramC75gfgAcyewaZhKyMcic

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b11a17b3ffd1132764edf27ed877fbc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          8d7eb0c720c70643e0c636042418c863

          SHA1

          13dd07147abfe8e546c9f1a85bd3c31ac233cac4

          SHA256

          a16870bdbf57b9ef252ec24258dcbb953e4c1938327ee6d085c39341ac510037

          SHA512

          33705240fbbb5b7d0fa5c3334d6a799af8ff258d8267e947c57567ffe7f6e6b756158bc2a437f4ec8cc73020d36bbdc8bf5772647b875f24e0a4c675f3f32605