Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 16:23

General

  • Target

    3e74532f4e5e8915cd3b666913ee9af4.pdf

  • Size

    69KB

  • MD5

    3e74532f4e5e8915cd3b666913ee9af4

  • SHA1

    de9c0802db1de0d83c5b088164dc13c41edb8feb

  • SHA256

    7a6766c38106c551ffebd8dccc68d5e5f9bd283ebb0843512b333f58e95edf38

  • SHA512

    0c4dd82d2d786481c55a77d1e01b363bf8add948adbeab4655aa92955759248e30cef51c4cbcb86c31492d402174dc61d150ea57d136d6bc047f604fe5b3c41c

  • SSDEEP

    768:dWTQjtbcWkUdpOCsBXabjNViCX4ZabAwnM9eTD/V+mZ7nsLxXfc+Mw5m2OnebTIY:dGQRboCuBcbiCWaPhZ9+HIWjmoQq3q8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3e74532f4e5e8915cd3b666913ee9af4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e2faa455869ced86f3e89e649377d0ed

    SHA1

    18daaa7710091c3f336c03f3821c9dd0763f9538

    SHA256

    fee5b0e00335b6dec6b079911f3e16cf0efe2e64fa37b72ea6ae571261869dfc

    SHA512

    4fc5d2bb2eedfa588a13e50d8f4efee007ddecb5462937c2acdf659660a9d59dded6053d351d7c73788dc9ffa72ae35cffbbc4f1159951da9817eb8c05f31f16