Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 20:29

General

  • Target

    3b4ba59346af2d11e702d6b2772ea883.pdf

  • Size

    86KB

  • MD5

    3b4ba59346af2d11e702d6b2772ea883

  • SHA1

    f3fcaf883adc12d06637b45928ae43ba5fc76d20

  • SHA256

    52728a0fbef42539637479e43a1a3a56b1aec94864f060f264fd6c07cab3836c

  • SHA512

    97c228dfebc03fc66c996b497a5917d48975b26c252c88f121250e9833176e93be86e39bafb2b00c9f207141c7618f016021f0321aad79d912ba749cf1ac6440

  • SSDEEP

    1536:4RrAC2Pfbgl+u3qJUboT/oMzj+ubgPYoizQaKJWepOiCW2VtackyJz1yhk:4cPTnODblMGtwpzJKWigtac1/H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b4ba59346af2d11e702d6b2772ea883.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    981f5aed18a967ef458dc1b11312d08d

    SHA1

    8964feb32967ec0fa6b953643a5434cbcec5b707

    SHA256

    352b9668f41bc6c86c4fbcd2873de89927bbf6ba0149baeb398cd1f66530a6e7

    SHA512

    e94df412e8bb4237ab97e5a9ed9b044c7cebc939c538d2f9ff63b235b949ff85b7a1f29e3e8a0fd757638fe7b5a5ee9f9ada2752cb4c01ed6a674cc7ccda90b7