Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 04:11

General

  • Target

    3bdba1584ed155ba62fba0fef4ee8100.pdf

  • Size

    89KB

  • MD5

    3bdba1584ed155ba62fba0fef4ee8100

  • SHA1

    1f5a434e38c39028a2569251f9d35a79028983bd

  • SHA256

    6d344786d3342e1e753c4333cc39441dc639216e9c3ed33805875df1a4900b88

  • SHA512

    a88aed15d2c9b95f9438896f74b55f3e90557d9f3a210899940778537ddd9d8ddfc02ff607b04d69aecf498d122fbd68148f18c1b02efd0d3aa5fa1628b7248d

  • SSDEEP

    1536:4lTyFj9nFgb/2mc70WOE4hOMn1lqBL39H899LberxoEl4WspOL4WQnJkpTsVoSxk:sOFj9Fgimw0WvmO81lc392XetoATLqk3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3bdba1584ed155ba62fba0fef4ee8100.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fafa82b7dda11b7e4fe45043ca983aa4

    SHA1

    2676ea3cda47704fe5ed4f1cb3d0bc84304db6a5

    SHA256

    c9cf5b30cf714641004db50aae30b6172e95ee470632a2635b3830d9ae9c6557

    SHA512

    8151f6266c3f3302a7c631f06788f2d3067bc19b63ce59ba60a48df3a6e339cd2ec0bdfb0f4fdbfca389864f0efa2a10dffeba4815ee928f20e345eb8814a6cb