Analysis

  • max time kernel
    122s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 01:34

General

  • Target

    3b8e2d7d5c6ccc074abe08dd7443d066.pdf

  • Size

    84KB

  • MD5

    3b8e2d7d5c6ccc074abe08dd7443d066

  • SHA1

    16ec3080b00e92bab7132f7be7ba60e834d594a9

  • SHA256

    c8725e44a46bf2a4616c5e5ccc5dc8813030265a41bd46b6339abec6f8f9e81e

  • SHA512

    a3e721d439a3851fee92c861ff6d4e2d3da8c2bce10a5b42f17e4b37653be8795e3794aa35956f895d0377bbb920f163637b2436d0a247903ff964a5a5feccdd

  • SSDEEP

    1536:48P8U2OEQZt6zGbA6UCrfUnETu2uy6ncm/OZLWl+iqjbapvBDkQW8PDTJlE0a:F8sreQ37gEa/fcWYiQjbapZkJ8PRlg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3b8e2d7d5c6ccc074abe08dd7443d066.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1200

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          cc3e55b8bd63755b446404bc76ffc15f

          SHA1

          bbe09f7d53ed6e2da77febb087325c0296693c1f

          SHA256

          b444215c22cb7baee92dc6e8b30785e2e054f7b32b5d2246673a7415c25fbea3

          SHA512

          555cf925d0cd2c9fabf3ba45adf072ed3524c6ba2ea4d4d2b4b3be88c52110ba1d2f1e4fc428f20ff84fae664d7b5974863e4f7a8b160c82df70e29a41d44f93