Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 10:23

General

  • Target

    3917_001.pdf

  • Size

    239KB

  • MD5

    e15b0d27981e607b6560262623a01076

  • SHA1

    05e43c7524c135475b13156688fe4980aeb29004

  • SHA256

    7f694ff6b47ba21a805377b97879c4493de3c78b9c00cd194279875ce128f802

  • SHA512

    8b495ae7378bbf5bd6248ccdce45e6847afffe7e2a15791e8023348859767f04f267b882bde271e112d7f291f7aa39f6e3d10a81ddd87ade5f7da7f316b8cf10

  • SSDEEP

    6144:cbBSKAgjqlc57/1h9lCd5kf/IOWwuBwtGr0G7MzznMLfFM79:oAgjql29l7f/Ix5wZ3afyB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3917_001.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dccc85ce544c90fa6837aa5dc697eedc

    SHA1

    a34dceb03ae25703812ec6bf895acde7d3077055

    SHA256

    2b9beed81d69ee48fb89028d09718dfcca7e9a5e9e3bb904e6bc9e82e2eea0a2

    SHA512

    13f400a98d46900a4c13c84ed335663570a847ef793ec6839c41a8617e274534d7bd9d379d795035e4e9a4eb6efa4a96bc98af69e1ad3f93651e85a3483f2268