Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 14:44

General

  • Target

    26962707d5fee347b3155635e3628371.pdf

  • Size

    174KB

  • MD5

    26962707d5fee347b3155635e3628371

  • SHA1

    68926f6d00465e0ed5756d8ec898c80cf4116f01

  • SHA256

    7e049914b3ccd2409c15fb0f7988d020fbe5b800a9ec33a3b7209eb0950196f4

  • SHA512

    5384e6e16f607eddd6fb2b6b9ea8740f5cb86d39b77339eb11c32131d0f6d850e407904308fd29c03f72b423004a273bbfdb3eae77e7f47a23d20ff63c4e003a

  • SSDEEP

    3072:DCyhPg5Cdw47sUJPV284zswiGTALyZExgyg8icrSS+XznPhuG4ixsxxK3GHeO84z:bhsCngYPk8GDgh/mnXDPIG4Sqdv8E

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26962707d5fee347b3155635e3628371.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9c50c507eda65e1853c2ff86ea12ee6a

    SHA1

    807443e3952d1fb8c5d585997484013dd05e5584

    SHA256

    db99bd05f2b4817d62736b8da797fff23cfbf2a87893ef48cbe79b9fb62e1e5a

    SHA512

    f36624abc6bc7c96ff8350f6dbcd65d9a18bb890ee334e56ebd0f6f52096a920435dbeb4392dcba550bf50bf4fdb948eacfd0baf18ce9320175e4f4b4285405c