Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 03:41

General

  • Target

    26b57db1a962530af14c5f70cb30c7a7.pdf

  • Size

    86KB

  • MD5

    26b57db1a962530af14c5f70cb30c7a7

  • SHA1

    897267795205d4e62539d76b245cb904bf78f04d

  • SHA256

    98eef840386707680c53675be977a12de082f827570190547ab862287719802c

  • SHA512

    023960c240284a9e7a473043e7b21b31405b1b717ebe9bc551e89c508d7b4f4637dffb80c48e3da0191bede2ad08392449ac58150e71313263dd1319ed86f8af

  • SSDEEP

    1536:dp2qHNHqMWm8z4G7CLw8UHYUgTxsT4MSWF+QVoWypOlWWxkP+AzAeWZMwzFp:jHq+8z4K8w8BUgTxskvQXlDkmAzAjPz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26b57db1a962530af14c5f70cb30c7a7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    96ccd306e532c9fab9ca08ae8ffb5e57

    SHA1

    6b47a97f78d5020fc569252f3a5f367e535d7028

    SHA256

    3d12b6faeb1a610510eae7208d31b9d99060ffec0fab7534eb272e631dfc99ee

    SHA512

    e2e0365e73bfbe3fd92ef92fbfa53287a65bd30a00a62b5f9f92a495fb97aeebd3c30b6a0a548cd5c876ff71b1737a989df2d528f968163e5c845c82068ac73b