Analysis

  • max time kernel
    117s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 23:22

General

  • Target

    3b523221651de6eb9bbb443d1fc2b836.pdf

  • Size

    91KB

  • MD5

    3b523221651de6eb9bbb443d1fc2b836

  • SHA1

    b3fb57bf790a9eecf949975ad452298b5f06872f

  • SHA256

    3b4bba49f74bd57cf5660c94014ffef658025f81e92855e021200738df26ecf4

  • SHA512

    35baffd63f82f2c2061490c496461961a182990e328dbe3f82dde4a5c51022995da8afcbec384dfa3270a69bee1ad6d61a446029d3288be246c8e63ba0fb92fa

  • SSDEEP

    1536:uMHvS9UYuzKPEbI6VSNGkBC1ZOOF+RhjwCTmxFwB69fzyVWyczfT/LLv2vW8pO7u:to49bJuoHOOF+fwAmxhROqfT/Lz2i7u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b523221651de6eb9bbb443d1fc2b836.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    90fe2d940fe781cde7ec18f1476cbaad

    SHA1

    1d5b107954c1e8226ecc6a8d4c4b29344959a676

    SHA256

    0803d9a61879f3b93c8f701f0cd37a495d166ee7eda2465dddfe41bdea65f23e

    SHA512

    601d36ed9467e5bb18a91ba912404337ff6fb1780a5f24e0488a94c15c81ea32a859107bf74ecc81a5b0c7ec464dae475c3610813e2e003c4d304c6aaa286e50