Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    05/01/2024, 01:33

General

  • Target

    426d2bd2c2b08f8b1bcb1818c954fb30.pdf

  • Size

    101KB

  • MD5

    426d2bd2c2b08f8b1bcb1818c954fb30

  • SHA1

    4b46b7259376c33fce0f340d5b2df2b4a64d7036

  • SHA256

    ad98b29b53c93068a2c74df2a8215709098da02337ec04b78d764d74b3a2eee0

  • SHA512

    ccffb51e83c33f52311d0a65a182890511e574d02b708910c22f1e5e8255e4bd8fcd6fe42798db48b4ee0d11f7aa109b254de2e59239bb96fc4e10d7b7670fc8

  • SSDEEP

    3072:nHi9ux7KpGy3Jm9U2/lt7MN0nq1yyCh7S0B84Z7ffotsmn8Na:nHK+KpGcG57MNb0r/mN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\426d2bd2c2b08f8b1bcb1818c954fb30.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2500

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

          Filesize

          3KB

          MD5

          13434057e2f5cebefed88ab9d9275027

          SHA1

          9a377ca035754acacb9d29a350fa449af9e534e2

          SHA256

          26a65c6afe61edd24c28a8d1f320051751f799f94fb5aa26e492d57b26eadaf0

          SHA512

          38ac36a0bf8fe613274221a4254c0ad6af6a3c2d6a574031baadcf4d7dd636953b04539ccee120695fbdc584e2219e36672d256aa5e61a1d609839fccc1cfc00