Analysis

  • max time kernel
    121s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    02/01/2024, 17:21

General

  • Target

    3e90cd2078f5606b12c7b61b0404939e.pdf

  • Size

    70KB

  • MD5

    3e90cd2078f5606b12c7b61b0404939e

  • SHA1

    a61e8da28f49791119a64088646840caa347e69f

  • SHA256

    24598d9ae2a8aced5d1eb5518f6e0fa2dce9bf9ad2ea1a232846b128c757b4f3

  • SHA512

    11953bd863b32a251929d45c5d22819909429dfe9827f634fc1f3a3bbc76feb87605eb70c41f37ff61f0238e034371034b82657f92982744cb698896ebb3365a

  • SSDEEP

    1536:NOcnjPPgCYrhj35QytGLx7qx4dJFHXWaYCnKKGIR:MWoXrt35NtAx7q2dDGaoKG+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3e90cd2078f5606b12c7b61b0404939e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7152ed29969f68dbda1ee50f930ddfd6

    SHA1

    e04e7c2660a570699aea7f025bca88fb6ec94443

    SHA256

    0c57c25967292c08870d624f93ec8cb31276df01f01f40036fd19529b9a8a04e

    SHA512

    c0e7ae0fa56b8acfc73c7c302a1add74a35ad7a2c32140586c6d15544d96ba8ee858744d5f3a8f18e95dcef43aae004035f374c006e9799f3b8ae7b50b1471e6