Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 01:34

General

  • Target

    426d63e59f5e0495f64432f92d8dc188.pdf

  • Size

    84KB

  • MD5

    426d63e59f5e0495f64432f92d8dc188

  • SHA1

    49213de88ee4d803f7ab52679fb55f93b573c662

  • SHA256

    a8b6639fb7e24cb9975159908f4d10949c3ee43cad1572730b441a23f713af96

  • SHA512

    c4ef8b334857df26b6d119937337b851f434e2b2d4554b34133046d1649017e8b6263502662a37dacc7e81cff8f957b78db7735a1fe8168b62d5a012f65a2942

  • SSDEEP

    1536:jdx64zB5ixL2YOj9WY6YXQGESwffMT+C/RTgDWbtWNmETkIEvH9WUpO7qc4:Zs4zBc1+9WY6YgGxwHA+kWU1IEvHg7o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\426d63e59f5e0495f64432f92d8dc188.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          42a18e598c0cd26e1026d3b0cf775e22

          SHA1

          2faf1f5db8087d32ef1280ac31852e9bc989133c

          SHA256

          f2814b52ce379ccb16e80a200959c51beb3041508297f1c18b80113a76ecdf34

          SHA512

          d08f9f8d8496e87c694e3026ec677e5029dfd35887ca3fd974517c2811495373994afcfcd96e4922bc106722f258389d0a2769d3b74ee483ba7167c795f09c22