Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:06

General

  • Target

    3740ee1570ba6a5493634e74397cdce9.pdf

  • Size

    91KB

  • MD5

    3740ee1570ba6a5493634e74397cdce9

  • SHA1

    7457c3f5480a8d7415b59bc5a70f7b4f9b176924

  • SHA256

    6c14bc773274b840573631f2167f2790dd81451ed05fce3671ad3ded25281c5b

  • SHA512

    1c1ffbf1778c433ae735c6afdd2518b71e2fc2e5ec6cb8e839790d5cd9fdb7e49524e9bb3f8f87dc2170914f778b0899f8e8370cfe08893d7f113339b9203663

  • SSDEEP

    1536:ogcnZnj+0QG/cYnJuJG1j8q3gwj3QmaykYr0r982W/Fbs9+lWLBqmLWspOSzvh:khj+0QuJug3gWQmBkYr0rhWdbLqx+SN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3740ee1570ba6a5493634e74397cdce9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f1948e5dc1355fe54764d7e1190f69bd

    SHA1

    889a6f411c641610358a3bf098dbed4b8d8a4620

    SHA256

    0bc96dcd5874102cb81c9c4d9934eed22a13dba033edf1176eadf659442fca36

    SHA512

    8ef7407be128239cc286b4c8217d1fd71f9ec258ab8e976e06aafabe28995ba0abaf57ce6e891cb7b68ad28c1a60a6149385faeabfcddd22eb296eafb5a51edf