Analysis

  • max time kernel
    121s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 15:52

General

  • Target

    3a73a3f749fedd674377e3914cbf7dce.pdf

  • Size

    85KB

  • MD5

    3a73a3f749fedd674377e3914cbf7dce

  • SHA1

    7873ed9b7d955afef28da9adfc457be5e21aa810

  • SHA256

    1751efa6fd3d3d509a2a9ba96f4ae5bf46da9390107fbce783ead75a9e04024b

  • SHA512

    273dc47cd7307c4047a80073e32dbb5c30fe34caf657d8f61a57100926226bdaffaf9772311d7add919df02cbba15b11e4cc94c9a236ba1c310d6338d4538055

  • SSDEEP

    1536:AvOo3ze535Ctx5dDnlYwJXrl6NkJgxn1TmNhWU7VU8pFKDxO3ihTPWspORs8o:oze7CtxXD+Sp8xn4N77Rz0MihTeR2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3a73a3f749fedd674377e3914cbf7dce.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0eeefd50756161e4e2d4d47dcd29dc7e

    SHA1

    2d31704090a53ee4f10eda4d395fa04640dfa6d7

    SHA256

    13cfd6e147ba68d48ad2259e55ad26777397d7f45fc12a9b42cab5ba5407d499

    SHA512

    eff46db65d87a5d96eff40aba598b3c553d8017841458d7150812650be43fd051490d1faebdb472717d09dcaddeacff54c60b545c97c7235bd36e2f81f425072