Analysis

  • max time kernel
    119s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 23:56

General

  • Target

    3f5c8be62bb98170b2a482121b7b1796.pdf

  • Size

    79KB

  • MD5

    3f5c8be62bb98170b2a482121b7b1796

  • SHA1

    b82c388091013a01e828bfc8026fe09a81896dbd

  • SHA256

    b7b5159452f8e9013d11b0800c617cc066a6eb85f6d45cf541c2d5f1c4656628

  • SHA512

    314cd8882e9d6ef7713c6d0aee4dd1d6880ccd4c36cd347b0f1068a46a8e1dcade3f6daf6f4b89dafce5412d1653c490402720b37b87ca1f34295743411536c5

  • SSDEEP

    1536:N7nIV0YbAIMlBZCykLK+hLvZgamD0NQvDTNFfNCHwZ3g:dnIV0SAI8Cp7ZrwTLMHw6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f5c8be62bb98170b2a482121b7b1796.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c99339df7c31ef053b1c73cdd452088f

    SHA1

    d27ce76f30f03bf013a94c1a5a6230e939017ea0

    SHA256

    e9526ce16d1f398da818016211bbd56b0592a57abc27c7a1a901ffcf76429685

    SHA512

    c1eea354ab0d4ff10d7165a8956fd1fc2ed7614263435387ac3a33918fd1ae2b92557373b13497bc305e750d0ce1e0f9c71e691e1da31c315c860e9ec77d6282