Analysis

  • max time kernel
    117s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 03:48

General

  • Target

    26e59cc44e88e07e01b5dcb21b1fc651.pdf

  • Size

    81KB

  • MD5

    26e59cc44e88e07e01b5dcb21b1fc651

  • SHA1

    b58dd711f57737f11bc53b0dcfa93e5e1a87cdba

  • SHA256

    dac7374efa4fa020c7a5a890a6539d37c9e2a4aaca87438d02c5ad59f58b1a43

  • SHA512

    cfd9bcf1c6b13f865312c133f8621e83964a5b64c66c603cb208eb21dd0aebb0c172b8c29dc5aa34cd30cf5167479ae1505cc7f7b9554ec6a05f09eabaa97ddb

  • SSDEEP

    1536:49AqLxSqFnQlDwAdjDjrxFPXjgDHyouCB3fT3okTXWHpOvTWuNWMvxQ6zi+f:4NQonQBrZDjHTgDHycokZvpNWMvxZzJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26e59cc44e88e07e01b5dcb21b1fc651.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e750e41d2c2e70269cf1e0b9c0cd67cd

    SHA1

    c7600e2ce358e650192be74657d6b4fa303f782a

    SHA256

    e3db113d1fc1c2cfc258a4a420088e156e4439ba84c989d77d091b8acaab5b62

    SHA512

    cb4194d51f51b6ef48299a428b37244fdd93c84fc84ab051f0b46192ecb9382164aba8b3f6fdfce2cf56ea95d6bc09565072c2e6e129268b94bfa74f237e511e