Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 14:43

General

  • Target

    3d1f721043926828e9ced469aa7b286d.pdf

  • Size

    35KB

  • MD5

    3d1f721043926828e9ced469aa7b286d

  • SHA1

    ab32ad5005dddcc1a51c2fd1c00092ffd2631861

  • SHA256

    50f7892dc85c7ae7468c5453771ecba6f3c511aea4b20bb06f80d691fc7a6e1c

  • SHA512

    361e5873e525a71da9c07ae60cfb6fecea250c8da7cb49c00b6ebc4dada872087c1c0cdc8a24c40813ec46e92fde310bb2507c598797ec38c48c4d209bc9c855

  • SSDEEP

    768:Kja6e6uvwasSfOB/Y0yUAC+gJiUAVFFYj5K9miFZ:K/e6uwSfOB/Y0yBC9IpVbYj5ENFZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d1f721043926828e9ced469aa7b286d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f338474528caf2051ee79a0c64859dd7

    SHA1

    9ca3afbf8253f62bb737d09c80d076a8ccbab4da

    SHA256

    46624d72d9846f4da7afe52a491f48edb9da50e84044bccb948219362620756b

    SHA512

    6c5650c80e706da5746ccbd398adf03b53b30f8bb04c65fb14b5a1826e5a2a6ef7f40daa210ff0168e33ee645e4fb83f329928220b6bcc92191c95b5f95f1e93