Overview

overview

3

Static

static

3

4d26a88386...ff.pdf

windows7-x64

1

4d26a88386...ff.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    09/01/2024, 02:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4d26a8838682a65527abe6d65c3645ff.pdf

  • Size

    35KB

  • MD5

    4d26a8838682a65527abe6d65c3645ff

  • SHA1

    ad1a58d86c8ccd9ba512e93fcba22d1eae930a72

  • SHA256

    2b2c6145cf2a873b56d613eca2d931930ccf30bb9fc910f3ddfa950490309a60

  • SHA512

    0a0aeca51d07e27a434e015621a788737a751d5578d034713e60f4e416bf5c250217f0944fb7b4d2101f2a72e713845cd855aa06f1dc4f186e781e5511f0d259

  • SSDEEP

    384:5GnXqifoQEmIisM7AQW48aQ9qBuhXa0gaM/E0CUSwv09oDQ2TgttYdBsF460gyC5:oaihEFisM9W46MEZSl1yXpYdBsFi7q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d26a8838682a65527abe6d65c3645ff.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    014119a0bd1499ec9ebf9d5448770a10

    SHA1

    7901a1a1bbf72b3337e388861e3c71449d1041a8

    SHA256

    a4dcf7ac734cc7bb6e6b0eb1228df7de2c91c2c5f4c1bbfb6fc8b13aa47c9cda

    SHA512

    84147d6fa80eecdfd774d8333fc78e0f407209fdab0f5ae3506fd35ac78df14d1fa52ddebae451f2035a557d67b20f485a2b8bcba08b55ce0f201586bc0a8a5d

    Download Submit