Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 02:17

General

  • Target

    4c2326035311ab2b8fd20d3dec3a55fb.pdf

  • Size

    88KB

  • MD5

    4c2326035311ab2b8fd20d3dec3a55fb

  • SHA1

    02427c33456eac41c8117566c945e9fa056b7bd6

  • SHA256

    f8b3e9ca841c69770baebc05400c9e53b937d825a27fd58dfdd8a6e06a532833

  • SHA512

    54a0e2af39226ba7358b7b6c34eef808adbbb9ffd7263d09517f1ec3bf1cb92f4020470f434d8218de3b2e28db849d35d29bf4bca06e46d0c66e76e9dad7d66c

  • SSDEEP

    1536:7f/QsFgSUZIXdJVSfE17S6gHKxf6Qr2N5gT0EjskH4PhK9W8L2eyg1vaYW8pO+wI:7QsynIV317mqxf6Qr2NOTbjskQhKP2ef

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c2326035311ab2b8fd20d3dec3a55fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          9f758bebc4e6f4bce41f45261d5a9823

          SHA1

          e350f91ec6cabf9c216e122222632d707a81dec3

          SHA256

          8482da5374a36cdc6ac9617b5f105bb96c2f6cb4fe9d3f77fc48dc090d23be7d

          SHA512

          d582562d3f85d9fd6d939e8f8f20eb53bd6b46fb360284798edebc839cd20164896bc63c2bba8e766c02008e76b1bae76a3d60632c75e5bbbed6ff9327aa9a86