Overview

overview

3

Static

static

3

06173e774e...b1.pdf

windows7-x64

1

06173e774e...b1.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    06173e774e03f67d7201149f6378b7b1.pdf

  • Size

    77KB

  • MD5

    06173e774e03f67d7201149f6378b7b1

  • SHA1

    3e1d405df89bee9dc96247203cd9519f9209d469

  • SHA256

    1d86828bf25a993f3c909e74ac88e5e3863b8182d097b6b3d9d647d20b4e47f5

  • SHA512

    dcce4d26f74b5b018779750558816cb4f95b9e2cdbdc5b19a341d400be9323a837f57ea98af363cc26b7aad2c44a2cfda0afc0c6a48d950cfbaf2a66feed8a14

  • SSDEEP

    1536:q+GNI/hEsJw5FFhUAF0lsUCkiSlUyBEvBO9qsWHzwVqTU/XW6pOu2p2COyI:4eFa5beAF0fiSlXBEvg9qLzx4su2pvg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06173e774e03f67d7201149f6378b7b1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3aeb47e40c1540e78485ec66a7ce160c

    SHA1

    09939e9d075bcd3f7fb6fc4575301100ad8c5a15

    SHA256

    f04e8dc0b98100c747000622a6c81e2c6c03c46dc6ecca34a617ffd7e973cad2

    SHA512

    439235d8889995535b04988d191e2e966930f169fcaa3883f6da80fad19ad614d8205f49c98a647aed68cd1ea9915895a08b961a8e473a687ee66246a467725e

    Download Submit