Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 02:40

General

  • Target

    3bad5208889e2c76b228ca022190efcd.pdf

  • Size

    76KB

  • MD5

    3bad5208889e2c76b228ca022190efcd

  • SHA1

    de6340532dc6a761861cc603388f31e04ef9f6de

  • SHA256

    dfeb9ebdd4a98c380c6fa420c2eadf2ceea92c2e2896de225503cb9f93bd8f67

  • SHA512

    2b8f472c3547abe6b606d33f4ee9d24b0dbdd3f7027f1c866888a24bc69d61d1c1a261a1d023a96a84d6c0b40d0da56e6032de270288e49c0e579051e07f263f

  • SSDEEP

    1536:EfP2wCHiOHCeQ0AwP2rfT93EVpfLjWyfACyBBiWZoJBj6Ieps8OPqQmm6ZAr:yP2w/Oi3z/rB3OJWzTWrrR8qqk66

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3bad5208889e2c76b228ca022190efcd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3bb331fe3dec20c34fc99808039e474c

    SHA1

    c350f29244653c0de1a5fb2ae627004e77e9a507

    SHA256

    6a2ea96913505bcf9109636f9231cce2079c7b6c771f0600af08ebd4b6ee7033

    SHA512

    35c4d1ce3d1c86fea3e224d8ba54f0368e332fc1947e689efbd2b27d96993962c265e675972adefc11ea5ec845dca2d81ac68c2930dd5ca511224564342cd45a