Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01-01-2024 15:39

General

  • Target

    3d3c9dbc8824cdb7114510ef740b015c.pdf

  • Size

    86KB

  • MD5

    3d3c9dbc8824cdb7114510ef740b015c

  • SHA1

    f9ab4c4b14c277b0e87fc8af7b8a27e85e17f102

  • SHA256

    5b77361e413dd16467e4a9496c91abe0d9aad227caddd03244e14a0e4d2dc0d7

  • SHA512

    d92347bffa548902debc1403faa2e73014fe356927d81a7a783aa4a235ef1b82485ae36d52c641bf1d7f26f5d4f412252c6f15e3b9003b4bf8ac1c0756e2fe08

  • SSDEEP

    1536:HFJVgvYHCkLLEZVQdzKQnuOdzLlQJdOUnLUBsoZpDrIWdNFVj81O/WwpOSHYaQ:vEZkLLEDAzBPHQJ1LmrPvySQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3d3c9dbc8824cdb7114510ef740b015c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0282906081a601d2cdaa33f393cec463

    SHA1

    253dd4ba860f52678559e2c9173ce30520a165e5

    SHA256

    aee53495cf7bded3651d9f76fe4a75f05958785d8f05d5fecc2305b04e9a3cb3

    SHA512

    3fafb3d27564b4818691a121c9b8a9999629a360738de4a075c21e3ea8310d5de08c165848535de23d9838517a9c108b2c0afe1d0fcff6221eac1074dab35f56