Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:28

General

  • Target

    26680358fdcb1947684ebbaec68ce34e.pdf

  • Size

    45KB

  • MD5

    26680358fdcb1947684ebbaec68ce34e

  • SHA1

    8ca007da52a128c25f89d67e9af12aacf7852241

  • SHA256

    c24627bfc59459f7980ca4dba6ca1f4c933b33de01acfd791e0e0688531064e8

  • SHA512

    542acddbe3004cb5cd6767e892805a609ae74ca42bfe67e755ea498655f95956b893014cdd2bf3b5a833c8327acfe8400b9ebaa27243466e9e50bd311b0a41f1

  • SSDEEP

    768:wS9fR1cVAFpNPVIkKV7DX4SfBzquj6nqZBoZJaovOxTX3E0tq2KGyc1H5n3Gy63:wUf8VUzPykw7L3f446nWBoZYWITX3E0o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26680358fdcb1947684ebbaec68ce34e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0982ed4cfc1426b18f1a53f7e221eab5

    SHA1

    fb02b7ccb4a177b5cea316905f3b92030085cc17

    SHA256

    d32ebe1fc1e59fb6ae73d8c96fa3e6208437d2a346fba273cabce639cb93b55a

    SHA512

    9f69ee1774a654e4672ad634fbfd426481c1525c392b234ea8fc121412e6c54ec8244f3801d94d51ed75fa1a7ffaa0af6db766af6707c4cea899d25a59528040