Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10-03-2024 08:38

General

  • Target

    be26fb9f3cac9c75cab23045b237655f.pdf

  • Size

    85KB

  • MD5

    be26fb9f3cac9c75cab23045b237655f

  • SHA1

    2d6ec09ceaef25d07199563260fb386a6a6f6942

  • SHA256

    d8df254ef9faf40667be0f5cc9e7b7ac3dd9ce661d60783f306ef426e5e544bc

  • SHA512

    b4a9a26761e79523f17d88e2eb8af2427149b4b8f66bd91771088478c183210966c44b21313519864c1e111d759047d4166f1eaff2e251a7ea27a1f98d678746

  • SSDEEP

    1536:u4vOjbvRcuSxC9oVMur8GQ1X6uRoL9veTMMiuZzwWypOlLYqWO37xhIZQP:pUvRNwOoVMe8GQkeoLMiglLYE37AS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be26fb9f3cac9c75cab23045b237655f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    087e8a37c9baccdcc939e7804a39ec1c

    SHA1

    c730f70f211356a8413729531bcbf3fd0790fc99

    SHA256

    13b9e858f8ad3b6b474b75e21d63bab92c4bd87bdce11d84be2d2b0529989e10

    SHA512

    fb06147ac436b2b9921a3093ed2d53d07537a857dc2a29bab9efb2f9084353a8075116e7985c7afb97b83eaa85160ff888400c1661156dca7830c322cd4cbce7