Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 22:27

General

  • Target

    3f2f2435247bc106168ad5dec55c2778.pdf

  • Size

    80KB

  • MD5

    3f2f2435247bc106168ad5dec55c2778

  • SHA1

    9a570efdbbf86070d3db8c74a9cba820e20024b2

  • SHA256

    7abda7271deec55ae7b0513e008fd26cd986a214e95bd17750194c8c22d2afdb

  • SHA512

    c390ea3d97ddb3d3d4f376cee7880b815822942501e593e6bdb59fd504b8a5f31d70fbf6425bd4d17e301abf4649b9bcb3fd8d04813d2bb7adb19413781dfee5

  • SSDEEP

    1536:RsuQtYUK6L7rtmNgnTM55m1VMYXA8kb6VedG2NZ+BcgEXaWypOlZWxMBBRqlWVR8:CtYiJBTMnmhwP6VenZ+BcLXrl+MBnqS8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f2f2435247bc106168ad5dec55c2778.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    777530550ec468c8dd92833e20bb8db1

    SHA1

    1cbaac23a3e8f368dda53bb1532e957c1b43dedf

    SHA256

    257c65bef958d5ea32ff2e47cc1d5c4cf38329333fa43f94495b34e503a55427

    SHA512

    256f4b7fbdc3600c3ce1f2d879b1fb861f580a778945c560e5d2646ed73f3118117b2c8527fe08d1c206806b461a0f7d5bb6bdc0d42d7900570b17b092848645