Overview

overview

3

Static

static

3

182c593ee6...f9.pdf

windows7-x64

1

182c593ee6...f9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19-12-2023 11:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    182c593ee66badba784c4037b78427f9.pdf

  • Size

    79KB

  • MD5

    182c593ee66badba784c4037b78427f9

  • SHA1

    9e164e44491bd76e12a913e286d56b9f1f2bf333

  • SHA256

    f57ebe61f7c3026b22e6c925b903843d2623da62fff7f6757406b29ad894a9b8

  • SHA512

    0dd2afcecb8c7a38b2be4588025af422c3f6d6c3eead5cf4208ba7d5bd44b851e660549f28741a003540e1185eb4ba16334e25a5950d9f0f5cd7cbc1ae7e20cd

  • SSDEEP

    1536:hrmJuKjiLc4qr+ERMOSIMHH4YtsSII9BHK5esXWOpOwrKW2xrZhW64svq/q2cQQ:+jQq7SI+YosSII9RVwrkxFQ6jvq/q/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\182c593ee66badba784c4037b78427f9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    881cde8baaa4b32f23e7dad4cba89658

    SHA1

    7b3d619a433fbab3cb61cf1e32f673fb6c880cdd

    SHA256

    764a40ca3ec4ede815e587992660c4bcb6a29345d4bbca28998387da2a4cc70e

    SHA512

    32c9f0d65436233072b34430acd06f70029c77109408afa066816ad83a83bbda3e69378e6e790cd9d5ee3d56c2c7131a15bce49ef73404c97eb979deb282f842

    Download Submit