Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 03:49

General

  • Target

    3fd14b08b5bcf2368a8ce0917c8d83bf.pdf

  • Size

    84KB

  • MD5

    3fd14b08b5bcf2368a8ce0917c8d83bf

  • SHA1

    8f574614214b0a0ceed69df9180ef564a2d6656e

  • SHA256

    768fe990089f0f6d4dce843d81253b9f8e966e6f521cf14707ca73e8bcbd4015

  • SHA512

    f8301465ca9386b7abd06eb6ab23d91d0e943b9b41276d3d6220db8a44a15ff95ae5d5c26ff75b58d71f02169b600dc374943d21c65cb3939875a846638a8f23

  • SSDEEP

    1536:qdP1Lada5LAtnlCYz4lPVLH1VF8EgZ6kc5ye4E4WapOtQHWtDVwgid+T6LE:YPCoL0lCs4ThVNAjchThtQWZwgidmb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3fd14b08b5bcf2368a8ce0917c8d83bf.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dfb953ad3b0bb312d1b4f80b83147916

    SHA1

    7587a23ea4ffdddce8821ff2cae6eafe5bc68718

    SHA256

    489b9e1c90150d0a12079a45e5dcd383a9b2cf8e6452af69281c6f8e28451909

    SHA512

    c21ffdec2cd455b75a485f6b15fabe00373d5599cc69d86c5651082975418e49d7d722ca0428f6bf0a1f63ce5b595c1bdf2c8abd9770a943a780b2c3efaf7445