Analysis

  • max time kernel
    122s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 16:58

General

  • Target

    3a930094e7ae58860cae6886c8a8d27f.pdf

  • Size

    50KB

  • MD5

    3a930094e7ae58860cae6886c8a8d27f

  • SHA1

    d9e7deb0b7c8ad100673596c3c36c67ecb163e98

  • SHA256

    d58e4f4a7656dcdfe1857225f7dd7b49a104249d575fc5ff4603e127ab86f490

  • SHA512

    a5c85ec0a6565761e591db990b2a82de87f238383139a0d81f813b2e3be14e54fda4d18a92bb4663940cb7b7bd21b2f99efd22b2581bffb90f15af9c67224626

  • SSDEEP

    768:5zeeYmUtoVhoFQz3B1uWZeJdkRIIIIIIh4i29YZSSXzlWv30mJWmCV:5art72zRpeJdAIIIIIIhY9nYz4vvJWTV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3a930094e7ae58860cae6886c8a8d27f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    17175c46a64a87a4b01f5b7372d53c5c

    SHA1

    2a8c3ffaeb608b4922a1488a63fa10c9a0dd4517

    SHA256

    a872508a2c4d672ba83d21bc27a6120eb6192b4ca9c796e3bf3f6b007397a0b2

    SHA512

    c4a29c6b6dd1316a84d8b10f0adb04b235b61a571a0c02c11d5be28360a97ff6f04f3e07b4a1402173e9a41c350297693a2dc09382d150e6cb22e46a9b13b42e