Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 02:17

General

  • Target

    3ba2f4d0b6e72eda3bcdf937c726dd87.pdf

  • Size

    78KB

  • MD5

    3ba2f4d0b6e72eda3bcdf937c726dd87

  • SHA1

    29ad212116aedd763a3cbc65fe454e9f3e6ea564

  • SHA256

    a4c43e5828830e8781de2895a7df3d78961c5bc3ba37faec4d9ea96a3e33251e

  • SHA512

    971d3f616f6af99bb6b695a19d83f76c21938d7922ef73636f4a8d36be4075cc93710fb3b24f17d08a6b2f45e28e43de994df2a430f13c1814d839052ce3f5bf

  • SSDEEP

    1536:hn58Bc1rJgZCm8mbQ6j12rG58UgRM461YbchsOZ3FRjUmu5NI5g:R4KM8mbL4rsD461YbGZFimuf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ba2f4d0b6e72eda3bcdf937c726dd87.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    98df19197caa840f975fa07c3a908eb6

    SHA1

    2f222b971306db9422a47265946ede8d62717a7b

    SHA256

    7200cb178d0c8dceae875a5d152a8c421f2d24f18c8dae4212811f9b0b20623c

    SHA512

    2d1e91da582ae87627387ebcfe2e5d6eb3b3fa9603c93b2c4b02a7aaa5507658e4801529778098b0ff2f218daa225fc82c91432bdf699f52a7ee648442fbf442