Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 08:56

General

  • Target

    3c6ee308781108f11e0a35c1a0854e46.pdf

  • Size

    87KB

  • MD5

    3c6ee308781108f11e0a35c1a0854e46

  • SHA1

    2333cdf87dd2a0a9b5bcc59fd281806e365cfb1e

  • SHA256

    558eeb5704f3947de2f145959e9239194f4ec0864969005b49fa516f74936c0a

  • SHA512

    f13e34665139d47632c9e296c634ea7300e5cf528f50285605a197606ef91ce0a83905da9ee356eaf20cd8eaed9d63bde1e38b680d995ffde576304746e3f968

  • SSDEEP

    1536:fDPyd5FqnONWJjzkCrHdaaXB+FOuX/94fYr/fRHkvYDt+EMPKQbDx1WW19YwWxAE:r69qnm2v5aaI9X/Kwr/ZHkvYp+EMPKQO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c6ee308781108f11e0a35c1a0854e46.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1700

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          0373d8b99995b2c337fca800f2f9595e

          SHA1

          ca97d947dca9dca6de5e727ba1001825c12ca3f8

          SHA256

          c50e403efb6d6556c41f33e2a3c3caddff25456276eaa309c84a5575b122aa85

          SHA512

          f3b17c8bd172280efadf2f24703b041c139ce5ec1d3ca683395f2e725716e01fe12ea31a9ee26ecb10874d630224270d712dc49323636290c7516331187e65d8