Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 15:54

General

  • Target

    3a819a809afbf8f5fa6b9ce9d9db8e91.pdf

  • Size

    86KB

  • MD5

    3a819a809afbf8f5fa6b9ce9d9db8e91

  • SHA1

    b6f7e6271d2deeae757864c7fd4e0c65d3991efa

  • SHA256

    2642f029270356b99e5ec059fa8f18655fd868843b815244b26f4a1db6f90d4d

  • SHA512

    901edb293aa7ffc43b713e4d744678de8759f7fb9f4128aaef123c5a095773c540db50f153fca6bfcc96298684070c06ccf42862358b94ff4e80375dd5397a7b

  • SSDEEP

    1536:e9/ArHd31g0UZI2ptqBZ20Ft/7uZf1/yqoIWlMjAshEWapOtQcK7Jo1fZhwEtZKH:48HZUZfptq720FADXjAshltQ9to5ZM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3a819a809afbf8f5fa6b9ce9d9db8e91.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2500

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          bac0291e289bc5e77258b8951e99aa1c

          SHA1

          f03763af27ad6f4bfaf03bdead2f072eb29c8fac

          SHA256

          67806c65f80a3962609c01704a60cab92055a1852e380b2ab89a2c6dbfc86200

          SHA512

          725d177eef923923a6cbd087802f1ecc83766d6e0e3edcfa1a0acf7980fdb7ea490e978b8df6556102ea79628a9a8b53ac40249d47980bb3411a9738c9def448