Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 22:41

General

  • Target

    3b3fcdb480be9047ee807c3a3d8f34a3.pdf

  • Size

    41KB

  • MD5

    3b3fcdb480be9047ee807c3a3d8f34a3

  • SHA1

    e74c244fe828e5c5754c522ed40127c6abbf0fb1

  • SHA256

    f027c4b7374d397e83fd8d7f3c779d83e0993e2157212e5d191000d36fd16825

  • SHA512

    a647a0bdcab08f03b747f22d2add94dcecfabdf967cefd05b52f2a899f0c330985b6b0548261388f02469ebf594e7e71597e37d9088c7be545f1dc6d927baa19

  • SSDEEP

    768:1UUZqxXF/Ph3P80mkvfwXp5FViv9sLk8CB3k6Lrg0cYhnE:B4BRw55FViO48A3rLU0LFE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b3fcdb480be9047ee807c3a3d8f34a3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    97d9921bdda5072b420583dacaab7104

    SHA1

    9335aed13b0d701166c75ac8cff6cd98b0dc365e

    SHA256

    9bad83f809a73c6c5a6c81d906fc073cf7f2d5cc5b41cb3a1354088853d48d43

    SHA512

    409a4b0e5c7f6b9d22ba794248c62c6767b772dd2cbb33a3f5bbd1e0e9fd97b97e767d18a3b5067e7bf5c4594270de49970300ce0959052e8923cfe3d868a5d4