Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 15:44

General

  • Target

    3e5e497ad559d97ee6208db96979ea23.pdf

  • Size

    99KB

  • MD5

    3e5e497ad559d97ee6208db96979ea23

  • SHA1

    91fe29a10f76b2b646aa87856316d13c0f948e18

  • SHA256

    6f0959bff257e0a505ad300b92e1a5ef40e9f0a012f6ff072de75635afd2cb53

  • SHA512

    9929d3c0859411503b7cc7d4547f09b823430552021f94fde4788aca6e25837e1c72bc30ed6b1b4e62b36372076a3b3486e7aa051564e43dc53b117fef4d8be6

  • SSDEEP

    1536:6RvQKJ/MDGnbxKdOSg+KDN8nKO9Ajjo3hBUlsDmvq7XYqOCLdf5o/qKvqval33vM:K/MKN+OPZDNMasMqOCRfOqy5IWM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3e5e497ad559d97ee6208db96979ea23.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1d3c15116fdc1866c56cb91f2f7ac5c6

    SHA1

    105554b10d3fa28ebfa60187bf82dd5dbd13cd4c

    SHA256

    d39d88575c5291532328d2af6b6a6b902fbd3a5bae2ae1eb0fad2b05fddf88fb

    SHA512

    d4f36c7ab0a2596fdbf3dec72fb63158c05237b60a38b115385f7bd4f758e11b968511e2567a5f9a1d6ae57dea86e18e5fccd8464f659076549bdaa0df8f2d4d