Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    03/01/2024, 14:13

General

  • Target

    3ec08c1b00daab1b60e532467f3bf81f.pdf

  • Size

    78KB

  • MD5

    3ec08c1b00daab1b60e532467f3bf81f

  • SHA1

    debcbff97395db75a3c97276274971be9a95b393

  • SHA256

    4f8c4dbee8c79db787d302e8a7ee1a07fa9b714c58f0ee3a9fabfd230fdb0ee5

  • SHA512

    633afb8a5773621c38552d134b2e7566ab0171851c760aa0d51819d4a6edcaaf5f25ce3ef85f22008e6073662d9f0b87f52a58eda91046a2758b8abfe3bb1da4

  • SSDEEP

    1536:HFcDyp5bs8A1hU/AJjuhwx8jH8RczuNiBTQPd+/02TAkuJSIHqhYnAY:+Dyp2/TgqxlRCYiOPf2TABqhYL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ec08c1b00daab1b60e532467f3bf81f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c0e1f8b1dfd24b7c7fdcd5c85fa1513b

    SHA1

    e6be336a1b801dbf82dba6021f6de887707bdc2e

    SHA256

    38b04a274ac585815aa3c271c52b364d46e2e0e174c3fbe5cd19dad36f1beda1

    SHA512

    68cce98d3d9202db409efa913cd5dde44802418594d70b361768e2f018226914b285695fbc5531247eb42d313e9c75348521d44f562ec054e30728f4ce584eb9