Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:43

General

  • Target

    26c4594e41a4041205c5b67510ac30ae.pdf

  • Size

    85KB

  • MD5

    26c4594e41a4041205c5b67510ac30ae

  • SHA1

    eae07bb0d8f833218cc4346bb6f01eaa20a5fef5

  • SHA256

    7f964a262a284c14974bbc33b3715bb8d9149e8123dcec0f94a176cf25398c99

  • SHA512

    3ff344fbe03689ec38855e7ba38ba8ede8857c737a4072aeda088b2ff1f98cd11fca507a2d14edfd7dc8501fe8ffa9a0935778c03b7af0ad5a48faa6c2a62fe7

  • SSDEEP

    1536:nyinztmQXEJyVOUw1rZsnIVq6TJbq4WTrVM0Q5pyYWOpOwrtT3Cwfhk:jJXEJEw1OnIVBTJbqHVM1XyVwrtmwS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26c4594e41a4041205c5b67510ac30ae.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a32a56841dee665251769f870eb4f607

    SHA1

    90334aa0abc57a76cc3da2f9a3047f5a49ac5983

    SHA256

    b55184d526c1aba7f46f8968c713fc70fbea1e3561b8c4538538bd3065d1a690

    SHA512

    8789d68ee92048e6f4c3ede1a72e8b86a83283450899791285aed2607d8a191367496b13385556c06e4c67a2698cf5ebc7c85ff9be5b89ff11b71b61b24a49a1