Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/01/2024, 15:38

General

  • Target

    3d3c914965bda4248b600f4bff89af7b.pdf

  • Size

    42KB

  • MD5

    3d3c914965bda4248b600f4bff89af7b

  • SHA1

    e3409da72ff7ac76e8a4a61d0dcff937e1a68c68

  • SHA256

    5be8ce0b74656851dd81a2636ab7e24fa864a5e057b5475efd4651e6cac7815f

  • SHA512

    ae6986330944344ea09c583094187be6aa2c5a41d3900c3530facadd7e160b872d852906c3b06de5611772521132ce04f09fd0cdf6cb15ba48f380d570903bdc

  • SSDEEP

    768:By+XqAmZMcSKJFo7DYKtWtCxYfFlSxHzIPoBVs/LQJ0G05fyU:BjqAmObguYfnSxT6/LQIdT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d3c914965bda4248b600f4bff89af7b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    998bdca85fa378ebbfe3d74a81f4f16a

    SHA1

    f288382be45a209ac7ae2e02bd57a2c37454daa6

    SHA256

    a1aa0ef6a7459aa3e9cbfa815e69eafc71602aa1b29b0585077b8c8dc989bd71

    SHA512

    cb810249ab63fd82c815501084136c26c26996a531fffe06b0fb4b49dbe5c713aaf4ad5c7009fa6fe63f970b46fb3b9901de0e85e1a4a199bfbf9d51f91ccbf9