Analysis

  • max time kernel
    98s
  • max time network
    24s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 23:13

General

  • Target

    3e1f7db9b87d4d47eff82ef9d88b3b3f.pdf

  • Size

    83KB

  • MD5

    3e1f7db9b87d4d47eff82ef9d88b3b3f

  • SHA1

    84e83e14a1b230012c289007663f2a56f2c5b9ac

  • SHA256

    2303ce10d91d92dcf9f75cd2729ad0a2bbac67e075dc83efce9261867d62c087

  • SHA512

    a66dcc934b8502f1d3a3ae698946314d5bdca4cca4371538fe7c5f5bad8969e53fc4c0d0d35b80e30136b13c0f244d2c1780c50c8ccbb016aa36ef58b190311e

  • SSDEEP

    1536:3MounOVnwYfy7MA4wUanVGhWJM5kc6oW2nWzZZtAqlZcDpZWbpONnOK:TnpKIA4FaV6aCQZtAqvepbNv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3e1f7db9b87d4d47eff82ef9d88b3b3f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3cdb788ae89965db519431a722342ce0

    SHA1

    d02c82b4e9e0cf5e6d18c0e57e52f77abdd858cf

    SHA256

    e18e4ec7a0454b3e6533c25d5a15ffe36877d846af939c6b93c67e00e3e2efc6

    SHA512

    e39eb8ffb10048797de98d78adc690635f7fbb12eba292ff2a30e9ffc09e23c9f42bdf2287c17707a710b7434b41ec24dab3e573c6c8889d118508de89bb19ef