Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2024 08:14

General

  • Target

    3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf

  • Size

    2.8MB

  • MD5

    cd89df88fbfbc912801c7337f5fae655

  • SHA1

    2f0c901142e6088855700dd2da7c204255778631

  • SHA256

    3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2

  • SHA512

    391ae4881e70c92635bc9d1d42bd3f60101933c2bf97aea017a2ae908653da8925c54dc386edcf45a0645aba51523ea6ce482a9e631cc17bb4d0217b47184eb9

  • SSDEEP

    49152:VoPQe9tUCxGwrSjRb1jiwsr7US+N9SWINdf9XmES1XmSVQ:qYe9l/mRJ2lrAS+N9Szf92B1XpVQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f7e4a5a6a9aa0a33692f1e647c1362aada5205474f55cc57b184ed92547f1e2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2892

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6a3e9f1cb7a45649bfcffc960b6c5d11

    SHA1

    37f7a4a2b45a7ec6f6f6b108989aeab4b04407e2

    SHA256

    41ae3eedc7f25115170bbc1c3f37c64ef85031865a5a492113fd9ae0f5d78031

    SHA512

    4b7203db7bd266d4c18254fa6d86fc8dfd669b20417c018f7296b6510cf323b90579917123ec7227102070f0ab641c44ea0512bf8b98014dfd676beb1524ba44