Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 01:51

General

  • Target

    3b9741cce55f34a386ac89a08fde7221.pdf

  • Size

    86KB

  • MD5

    3b9741cce55f34a386ac89a08fde7221

  • SHA1

    b919729fbd2850cbcc230df81a369bb835685019

  • SHA256

    9f030cc652043c6feba5575e33dd6da00770fdc04b12cee6850854d9962148b5

  • SHA512

    0ef038659f9ed707107d4c7553d0dbc3d0bc8b50bb3ab1927183b747577ce8afb3dc28c9ee4ea84010305b77e6ba1668595e3e5115584ed336bcd35d7dc5d29e

  • SSDEEP

    1536:djDDU13xpT7vw1ROnQKnUq6UxdS2VBtyCm4wsxqBSW2WAq7Wnii6iWypOlLCO69F:Ns1B17CReQm1xdS4tyTdsxKS2aneTlLE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b9741cce55f34a386ac89a08fde7221.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e0cf7bcdc02b28ef0140934cae4f330a

    SHA1

    b986189bfad0f4e5f4324e6ec744d0bc865f89b3

    SHA256

    ff3637506befd4479b58ba4e34a06406d73393dc5a5279d5c14f4e947d440034

    SHA512

    8a177754c5d4b00a14dc9873dd824a2d2d61730aff0b5ca9a2af331b508818f3c69b72d0d4a64f373ddb75fad921bc7a3b0087847a5d1b7dd4d8e1e3498a6d46