Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03-01-2024 21:58

General

  • Target

    3f21a7ca018cbd4c243b83b1cd42e112.pdf

  • Size

    91KB

  • MD5

    3f21a7ca018cbd4c243b83b1cd42e112

  • SHA1

    6f6ac769a0d178a605c3d497d6c449c22c2c9445

  • SHA256

    c9e15bbac39ab7563255a9fa239c04df6e1a6ce989ca9415714341028447aa7c

  • SHA512

    b792312aab90f7dccf367ef4bb4c11a65468ac8f4be4032e41a71c04f7a0e736a31a9e8c7533822b3d8d0d705625c612198c19d04a5428e855856a2dfe81bfef

  • SSDEEP

    1536:QIJ7L0iEAyBgtYR9x+9xUaTVXK3mdCkBPnENFJQFf6IvFWOn8Cy46nxWspORuWNF:RJ7L0f2aBEUa43KCi/8FJu/6noRuu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f21a7ca018cbd4c243b83b1cd42e112.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1a7ca09805e505ffef40e6e56090c656

    SHA1

    a33ad7537f77b3a95e14a3eca6e8eaaa5f2ace19

    SHA256

    ad9b7f0a6df119104aabf12a50685b7cf13ce2fe788a9c6c687ce4c15370fdc3

    SHA512

    c0980f6d56e13dad106b7cc998f4cb78b3981f55a3c7e150a9c2a241a9e5f7c0e56e6f21cf3ce5aa24da932a0958f5a4a87f7b7842d77f0e4439462168f75bec