Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:26

General

  • Target

    26590b8030ae0d9f7917864b3e5a6fd4.pdf

  • Size

    88KB

  • MD5

    26590b8030ae0d9f7917864b3e5a6fd4

  • SHA1

    cbf16803016b196c629850e93aa3d7554728c19b

  • SHA256

    b42ca001e5e5eeed34bcfbe665f7aac9e6b0c24279e17cbdcac976b8a5ccd95b

  • SHA512

    73776bc7f9105033f561f7f9dbdfdbd5d4aa2fda3076be2d8e4042293745983244ca9dcca8679873de5504692fa7f83a0161547173637eb933dcd7e61adadaff

  • SSDEEP

    1536:DwqQ938SA2gKcY4mXAaKGAWn4BsqOJXFNReBw3WkNpOPaW1pvJWTaPKgKoOGp1T:YsSA2zr4iKGAEUsqGFyBwYPBvJWTaPCE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26590b8030ae0d9f7917864b3e5a6fd4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          10da32975bd5327aa016d3177ce1ad2a

          SHA1

          06896ccabe456574838652d1812114668a3fb4cb

          SHA256

          c711d0f561ee3b0ae98ad08f99d61de8e74db5ef7a1b70c7f10a9b756a1d2cc0

          SHA512

          928827d61d3d1d99ce790372f34aeb851addd72ecc9cf4b3790c2a60b355a2dd1b114147b75f171f44dfb842c3893a747b701542d825ed259c0fe995fb42c50e