Analysis

  • max time kernel
    121s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 14:04

General

  • Target

    3919c1dd8201a59f9d5c513e2613804b.pdf

  • Size

    84KB

  • MD5

    3919c1dd8201a59f9d5c513e2613804b

  • SHA1

    a790301972fbcabbcf2ad419a0e584216e3e13a8

  • SHA256

    2e3437eb6b3df411fd1732fb4ea2132ba51f638f542785159f717c38a8f80eda

  • SHA512

    1c5183b59501b1cb50d8dfafc451189fdf8f5832fb4c2f78a480721ccd7b98d640acac35b44f68b91f20d73c70a58033037032d08c8bb7bd138687627d9daf53

  • SSDEEP

    1536:Lg71qzQmWo9JpzjScJzB1lhJKVckTtLJ+T5iWnDLgjdBOgXgkWgywgMgJEWQpOCW:siQ69PzjSabJKVcytUoWnojdBxQEywgp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3919c1dd8201a59f9d5c513e2613804b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    91dc11c8dbbdf87e13e9324df2cfaf2d

    SHA1

    8ece74c4cf0e6faae5317a880b5abecf18a3c9d3

    SHA256

    2802539e833bd3570a06f6dd5e9d0443517e370acaff1ff1c75aba9c88b1b976

    SHA512

    9bd95fbf4534249cef08d98b46253da4218e4083fa34d110d23f2295f775d32495b33a21c02997268f6cac6d48b84bc66f7bfeecaa7a4196dfa7b435e3a326b0