Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18-03-2024 14:09

General

  • Target

    d3b48c6e6917e4f3442a4ec8f884b53c.pdf

  • Size

    151KB

  • MD5

    d3b48c6e6917e4f3442a4ec8f884b53c

  • SHA1

    227e50de8f9d08257724aa5ab2e1eb4ad57c1a87

  • SHA256

    9b1133b07482581b16e2a5497c3a6498e209490a13104bccde1217ccb4f382c6

  • SHA512

    2c7c3395fd26195a90eec6e67187e73683a20a44ea3e3b19d1895153f20508c8edf596994f4a00691a7783e840e22cdc23b30e8c02debdeccd29433f5742e06e

  • SSDEEP

    3072:JffxPe7kThp6+tfDnHjyTgzKqX3NEYvAHE77eYItuRKaXy8:JBmQbDfbHjp3ZAH0bRKUB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3b48c6e6917e4f3442a4ec8f884b53c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4bf90a546d01de17832cf8b5a8969572

    SHA1

    3e3a8f9d141e3b8ec9b747ef5666896e6e7c9682

    SHA256

    ca952ce695a4e6cc275c0511c8f2772f9b9e192cb1cb34afd17f11d1bc0dc2ec

    SHA512

    5c6b87b31313569915e9a7260865977ed303dc3647ab32f9d04f3ddacba9bf80054ec19002a025861409647324596d7b26032bf5e1f350c93107e6d33a1ce501