Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 23:58

General

  • Target

    3f5d034a027e6c6ebb7fbf9bb6d2da42.pdf

  • Size

    109KB

  • MD5

    3f5d034a027e6c6ebb7fbf9bb6d2da42

  • SHA1

    bbc9463d9171c5f44143034f1bbf51b08e6838ad

  • SHA256

    dff198b447884e497778579fb381cc5ef2b607742483e49c22a9faf92f4e8e8d

  • SHA512

    f6206d81a54570fd3cd197a36f59baf65221131c844d56a7532beaf1401258303ac59c42fd4d730d03de58106f716fe3fbdd4143ff45bb20f5504436fa4cf362

  • SSDEEP

    1536:EI0AgykA2TmYyxti9LLsGf76iL5iZfYW1AsiWapOtQCWkXHXK74nX+XxUlvjbOxM:dzg95TRAoZGo46s/tQGXHXx+XxU9jb2O

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f5d034a027e6c6ebb7fbf9bb6d2da42.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          eb479bdeb676bfb912d0ebd7d0d3c32e

          SHA1

          0b0e0b0c002aee7388521f125d02aed21871c259

          SHA256

          4e172ae719b5dcbfa2cba54b96ca52d0d0214033b658d94f7ec348c88665c414

          SHA512

          313af5dd918d6badeedd71f97a333c5d9ff6bb273da3517bd589d57fdcc4e0d67dcf935ab0017773a68ca1b7b6fe7f4bb7f97af974e65fc9b31ea2691125c7ae