Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 14:32

General

  • Target

    39f05d16b1d360093db5e73b5353c1b3.pdf

  • Size

    43KB

  • MD5

    39f05d16b1d360093db5e73b5353c1b3

  • SHA1

    f8171f67c749db2d434ecfe22742aa0fd816b0cf

  • SHA256

    f4dcece7c359d503bf5189c71a0a73d872fc823a0371e0384d95a1e2d9b67785

  • SHA512

    447b36de14768e9407637543635ceece7faf6ef4b87dcede68be1b3b34d51206b17a008e04ac487b8c858fa5fbe2e98b9d503d3749ca5c1b7c2a2a41a3e8cf1c

  • SSDEEP

    768:+AiNNWhDdFAOX96yCDtN1PppKBB4fEETfsmW7lvQukwB9cKwaN6aH1m:0OhDnSZ6C9jsmW7lz7NhVm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\39f05d16b1d360093db5e73b5353c1b3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    363679720f5c354e48432388ece10896

    SHA1

    58cca8f60c26d8da1c6d330c372dbfe17d458cb9

    SHA256

    10d7ecf6113c1b31992c8fd7fb7f8c45efe41e197152193d8dda4c8c65d1b922

    SHA512

    f061608994847b1b602ea5cd9256cceadf01300fd693f2270331075a2623a822d073fef029676791da712f54032ed9a2e7cf226d3e0da7e7ec3c58a8a6ac20b7