Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 07:07

General

  • Target

    11c26f274e51dd6da20c7e8490fa71d3.pdf

  • Size

    85KB

  • MD5

    11c26f274e51dd6da20c7e8490fa71d3

  • SHA1

    f2c17bcd1d314d2aeb9fe1490a329338691447f9

  • SHA256

    5381c9d492fc4a03e7083096b180144cb5142b1446f2b1482da12ba09836fe9c

  • SHA512

    d2ad880b6b7f8f821639ac52f74dbc45fff5086cc73bc6ae8bd8314a925d8fc524bb4e335149e24a56ad7a7e3175b16822b1cc56d266da2ccb3b17ffc5372854

  • SSDEEP

    1536:yPqvLc7zXxeGRqlWgwtykZTnp3Y/rlKFsqOW6pOu26WCZbWcK+:oULcXXxjXdQkZ7Yc9Lu20ZbWE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11c26f274e51dd6da20c7e8490fa71d3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2628

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          606293cd6da680d41424feae63ade10c

          SHA1

          ffdfb08d1b49525996b6f31393ced8d35bb5374d

          SHA256

          50b6eb5107fabc7d3567afd07d91d9f92610f9f5dbb849d5180528680a7c9583

          SHA512

          87ffcd5b31611a8ae5dbcebb1bdcffb52ee2c9e4d869c38861a94fc3b0ebc03b4ea05ecbe5b1d4cd6cdeb7a9db10e4b851989ef8c0b64db8f1843fb1bf1461a9