Analysis

  • max time kernel
    121s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 12:26

General

  • Target

    3cdb1a14f8641b4e67e0072fd9cf9890.pdf

  • Size

    85KB

  • MD5

    3cdb1a14f8641b4e67e0072fd9cf9890

  • SHA1

    9606c8434e1bb1f19bd5f8b7f4c0b840173a9fcd

  • SHA256

    bfabf07ff418db0cddfe06bcbdbc9004778ef7e1c39cc1c383d24ca90a0c1f60

  • SHA512

    6a1954f5e3beddcef58ef2256d52132e13515364fd892558305d57cfae7d720c149ebf91b0b53e661f97ea553d758b84aaecac388542af4ddad9b6d5a41caf17

  • SSDEEP

    1536:7LVbNInoiaB/97BxCzicWLzPEqZ/UGT2Yk3H8jRCSLjGPWzhWKyAluu4W8pO7Syw:FhGs976ucazPXZNJ8cjpLjGIW9AluujK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cdb1a14f8641b4e67e0072fd9cf9890.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          05ba4c617b93f85358cdce22be192cf8

          SHA1

          274f4c97f274b122351cd60686c6f592f644b3d6

          SHA256

          849e11cb64c1ad2329d686757aa1cf5b3fd803e8e1787cdb34a118b0222ba874

          SHA512

          da2a0448f817d28f81a89f6bdbe5f4fd71a73e1c89fff121663478828326010dabb166c058742db7ded520198fe5302dd035fbfd92f40afe98fb5d11d1856d39