Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 12:40

General

  • Target

    3679c32e6bc2bcf246234b7bbba00a3b.pdf

  • Size

    81KB

  • MD5

    3679c32e6bc2bcf246234b7bbba00a3b

  • SHA1

    3778452240bfa0e8da31590f75052a9e4c73f73b

  • SHA256

    73b412fdd2188677fd4f6176828a8cf3fafbcacaa1ef2f0e5be01ffe3109ee3e

  • SHA512

    3cd145fed2d9d2cc75571e23e3042a4318fa281e569ce853d772107517938d56f6b5ba54e02f0f54f1689f12de73161cd2f87bdde0ef64f86b8edb248b169e7f

  • SSDEEP

    1536:13r6LgmTfG3ZJwWBPuR4TgtF1NcttownQB+vD3i5HWEnvzWwpOS9WpbL/4i20xw:p6sGuJlQNcttown++vO5vv2SyHQig

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3679c32e6bc2bcf246234b7bbba00a3b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          a07f2aa8bb503792b050d47c1a470d14

          SHA1

          e628c1725ec013a7b62a89ad23e9c5b6aac76112

          SHA256

          0d56e38ccdef4c381bc4f360fa9190a85f7e2fb1ee4c64626359016c93d1edd0

          SHA512

          a8d1694b0413fffa3414d8fdebc40aaeaf9427c71ed8e655b9e29b260fee24e1cad6a9bf6752f6dbb17c164c9964468bc6e6cc0127eb54c89187189b4cd9a394