Overview

overview

1

Static

static

1

img218.pdf

windows7-x64

1

img218.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    160s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    11/10/2023, 11:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    img218.pdf

  • Size

    689KB

  • MD5

    5c1c73a518d5c294b8b18c296948839c

  • SHA1

    11faab6b5c9d6d7c7801d3d1c07970b9ee45c75e

  • SHA256

    b0b3e45abfbb9ca5fd55e70df2bea13b2d38809413f506d339950a3b76bcdacc

  • SHA512

    5900eef31dd094b6f3863932d95b9b2c6e116e2943680ba655a7f8629fdf8cf50af586378f7b02fc7b12659eccc25aa1dbeb513e578240cc17e7e6397a61d676

  • SSDEEP

    12288:HXPNGNue1yfeeGiDg8/33mbW1JXHuEwWBEj8JzrHS:HXFRe8e3ilqGJ+BWB88Jfy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\img218.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    da1eb17bbb51a3f03dbf0b83d7119bf9

    SHA1

    27b2c69cc1ed3db55cb290238f08ca87d3074637

    SHA256

    c26a751ac86425ce137bd28ace6a59bf73d122d148369723f085e3d20af09ed8

    SHA512

    b57a0525e669ed81d615ce9827a2afa6b24ad042abffd64db7084a2689e8e230a8796235385e46cf454b498f8e6d71432ef8294768e7781cb77c20536e3766ce

    Download Submit