Analysis

  • max time kernel
    122s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04-01-2024 03:56

General

  • Target

    3fd4f78898222a510a16c30403f0480e.pdf

  • Size

    45KB

  • MD5

    3fd4f78898222a510a16c30403f0480e

  • SHA1

    ade7a5443a4b3ed7d9d79179f99cb51f37253daa

  • SHA256

    fc91fbb342cc654089dc9dc4b237ba2809fad39873897cb5946889c2f1eaa108

  • SHA512

    b3f23bdd4409ed20b5bc0c279fd72c87c19c9673ad3fc1aedc41e344b67aad7e0f64f1aec0f29dc21e145a825fcb2cf139118c559d659633f6b8d09b29df2d4f

  • SSDEEP

    768:KQyF/0xlLqr52MQAACy8FjDHToB70MjmRBYzmJ7sOODnGqwIom8DfRyR2vyF1kzx:KBMxlLqt2AAI347HmRGmdsjLnunzMRQD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3fd4f78898222a510a16c30403f0480e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3f2a76c1bb52ed33381cb84f08191c58

    SHA1

    9ddb934e953a794093506536700605624d245315

    SHA256

    1e18dca4d7d2e72d54d72124f6981ff1527c3f2135e60def8840fff7aa5cb2d0

    SHA512

    088b1b00435784e51d11870097d8343451d58df65597c6c5c70099c1eed7693ac9a3cdf0d0e7c784df989da37ce083ac1d63c477aa93f6a1e73bdc1efe5c32d3