Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25-02-2024 12:53

General

  • Target

    a3d5f43380235248595192b061e31a2b.pdf

  • Size

    46KB

  • MD5

    a3d5f43380235248595192b061e31a2b

  • SHA1

    1da8285323ab1ba1e485fb8f3f177867304cc266

  • SHA256

    8143960c48f3b24e408da341556fd3a3035dfc12712bc06c449080f16af84205

  • SHA512

    b4657e2752dcf8f60a539b1225a4b99a7f02460734becfe06702558fc51f03a1574beca479acd545d4ec40c77c34300a9b2c163dddb733fbc131c7b145ee0d95

  • SSDEEP

    768:fgGzpDipeXpAJPCzqhxVQjwoAGCYfXGF85Tq6rDtAUcbEHtOyJ0vRtClDn3+jYFt:oGFWpeQRolXFBnrDt0bENOyaRM53tiZo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a3d5f43380235248595192b061e31a2b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b0b8ad93a35ff8bc49f3bc155921f227

    SHA1

    dbc77b883059e926dc8de72fb0bcf62a74e9d52e

    SHA256

    3e64ce42efe07b7edf28ab6fc873d8fb94097594966d7dbdad80921f43d633b3

    SHA512

    b201f9b69cf699ce9f0f13aca6cb12b911a51f76463b650a3326b9afeefde3970aa4cfe9dedd420443e588a3ff7596443d9a352719e7168f95f4edd3bb1aecc5