Analysis

  • max time kernel
    122s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 02:08

General

  • Target

    3fa10700a4f896fe9628359d8f920fc1.pdf

  • Size

    87KB

  • MD5

    3fa10700a4f896fe9628359d8f920fc1

  • SHA1

    61fa7865376c8f42d582eda5a7cbe8a17525ddb1

  • SHA256

    8493f51036d0f887f39d9ade2d03616745eb44ec72841cfd460510c17a1dadbb

  • SHA512

    394d61a2661f85065831dc2b6e73569af54ac097565a7771350e197eaafbe1eaf9c6f5b48955842db0e9d1f428721ef6f6a216fb6378501056a26952c69434e5

  • SSDEEP

    1536:qU1Z4gRTEPnLhyVwBMK/3xlY5X5/DzFQcPgA6WCGvyzaW2E2+YuMeeGWOpOZ/7Xi:p4guPLhGwiF5/tQcPgAhvyz4huMHbZDS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3fa10700a4f896fe9628359d8f920fc1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          4bb78c4e02bbcd5abceb6be60547acda

          SHA1

          3a3bda791a9442b9d7e68d7e9763e87ec8579ec6

          SHA256

          bafa5dc2a0cfe45013cbb424debf36afa27855cbcbd908778da7d6222e9d7b39

          SHA512

          1f0e17bf0f66c14a5def343c29de9b0f52e31c6a5f1c0df28a39e50c2e3f8f818adedfcd250732378ebdb1efbd6e207f93662cabb28ae5792f1229656a53a6d1