Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 20:13

General

  • Target

    3a9c404ba0f2ff226888ecb227feaac7.pdf

  • Size

    88KB

  • MD5

    3a9c404ba0f2ff226888ecb227feaac7

  • SHA1

    10822504b4d4b3101fc04b6eb2c771cf3ddcad68

  • SHA256

    715da6658fc273b28d8dc7fe5b1a7b98dbb2a2034f0fe468f479b0fc7b2004a3

  • SHA512

    fa524100bc52444f4f97c94fd996167c9af9d38459ae07995fd92f762d160766735afbdbff21481ca026ae06109ef4d89d8a7618ba42ce76320e9de9b7a83a31

  • SSDEEP

    1536:WX9sylE2xIc2lc84CHQMOLwjPaz45AdCyVMQ4oZ9BJJ55Nu6WL5rL43Dh4WW6pO0:ysN2Ic2lc84CHDPjJ5w5VhZTJJFu7Lsj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3a9c404ba0f2ff226888ecb227feaac7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1bf44ed5b971acc307b399b485fb8892

    SHA1

    925f7c3ab832e6728d640f26f7f449f20d43094e

    SHA256

    67f1c16336f0503ec887084e45e5293fefc9d2afbdfae1b13f7a7d04735f78c0

    SHA512

    247cf5a510be6113b627665ed570953cce71a44dfa5fc658c3f3cf477f020330eb526d92ec5303010acd195178ade4741071248bb472e7d616d2325a181f7acd