Overview

overview

1

Static

static

attachment...uo.pdf

windows7-x64

1

attachment...uo.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2022 18:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    attachment20220906-19945-1krvquo.pdf

  • Size

    65KB

  • MD5

    cc4e4be2e53cfce98992e9350db22aee

  • SHA1

    22bc545636ad0fdfebce07c49dc0b7159fef095c

  • SHA256

    6587900b6f0dc398a4bd6c25b04293ba78b0687c700e5fb1259d9b0f3d5b3f8a

  • SHA512

    3ba566a6a2144ab47b065d3f758b9b09447f48bfdcc7236ca9553dabb3497f44191202da3e13348aa1cb1ddf9d13d9fb3bcebb70459a0b473ae018f81405d59a

  • SSDEEP

    1536:Z0XlDrilA9+um5JqnxqZWXAYV0zZp4bTVNEnhN9n/rT6OBTa8:iHilA9+umPqnYZJc0qNEnJf6OBD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\attachment20220906-19945-1krvquo.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1228-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

    Filesize

    8KB

    Download