Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 13:13

General

  • Target

    3784a30f4d7a6636cef1dde7d00a219f.pdf

  • Size

    91KB

  • MD5

    3784a30f4d7a6636cef1dde7d00a219f

  • SHA1

    df6bc8218885fa64a9920e22035cd5f6fc357cc9

  • SHA256

    6b7441496dd6a1553cdee5a7da4d0aca47cb8e5905c65bb4c72309f5afa1a13d

  • SHA512

    8ebf7873cbdefd15cfbafead3d845efc4a650dd6014b6ada54fff0ba4d822015f3e86a285f3f4689e8820c04a32746cb7a600d8b1f22f4e8923886519dc10ab0

  • SSDEEP

    1536:RZFbuPM2jQFrAVMJA1vA77I52zhGcz0xL6dmWZpSHWusYcsdvGAWuau9TSWhV7vM:lSM222UIvA77I52zvz0xL6kWksfsdOAg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3784a30f4d7a6636cef1dde7d00a219f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          fdf59860a7d43ccd2ec579fd9a5cdced

          SHA1

          4fee7d49c3a1022d34b25de2d55194842894a219

          SHA256

          d635b213791a81396bbd03cf75960ee7c4a7532071b99d50c4a8eaadccd334f4

          SHA512

          517253ceba13b20100d88943a8895b716501f377fdc92479274298193a8f266e82c8555016cb805c9edfe5a8a79ce7bf318654c481e2a367133641165ba0a81e