Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 13:36

General

  • Target

    3844a4cc8e9c7eb004788aa1a7ad9533.pdf

  • Size

    90KB

  • MD5

    3844a4cc8e9c7eb004788aa1a7ad9533

  • SHA1

    d94c74322eedbd722313ccab26f6091b60d3ec27

  • SHA256

    bd7e3f153a1a34265a387d6f5835f5f78e1fa2bfd60c1b73dc53340b19e98cb9

  • SHA512

    24a21d8e1da39f27d09c80369490b735317c4b9cc10d23b533e9b79f0675f83b49aed5726ec213ba3e36b9f95e0d3ea4305c9d8ee2ba67fbd584c1d80718f96e

  • SSDEEP

    1536:3Zd5nhH9zt4HfNrpAVaVGEshP0ivL88MFscpq4H1lfFzW7/tKop9VeHWQpOCfG7:Jdxh0/QwsDhPtLIFlwKl6QopbeyCu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3844a4cc8e9c7eb004788aa1a7ad9533.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3b3763c04c1d732689952589d10fecf2

    SHA1

    c9637ae9463e4fd014a89d283a155e260668374f

    SHA256

    c09de6198f25ecca8563648eb8d264f1049fa9f3d9e322ec6ec0344b4474bfe0

    SHA512

    7f19051fb936a07dfbf29b7f4727728122a4b1690b0bace186913138067e44ccdf34f9481a5b72d5d5a71c57e94e9d992839a5f3b6fdf3591a7db325853d6a3b