Overview

overview

3

Static

static

3

868204c1d0...84.pdf

windows7-x64

1

868204c1d0...84.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22-12-2023 10:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    868204c1d034d6b2cdbf4bda68e02b84.pdf

  • Size

    35KB

  • MD5

    868204c1d034d6b2cdbf4bda68e02b84

  • SHA1

    bf4d578b9ffb68db51d255d1b589428b5fe0a887

  • SHA256

    7e78addc40dd8356204ed31b777c04bbc0274e728c71fdcb6f9e13c8f35084fe

  • SHA512

    683a792c8e3f3d1cb06ce8421c66e3a03817d1f10479a7e5cb0ea691b894f47e94771fdfe8ed27b55645b7ecd765ea12cec69ee89282fa4afacd45219e9d09fe

  • SSDEEP

    384:Vyrn8jonYsdFcs1iBM00EKyZYt16N0aCUSA5pJ1TQ/Wpl6g3LgukzfL7CUSAgb:krn8jvsdFcsMy05YD2Z3JEW+WguK/C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\868204c1d034d6b2cdbf4bda68e02b84.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    18430e8f1c393e61e983a7e05f3e4a43

    SHA1

    0eb956b694a041bfd29f06ebd83faf11c7337dd8

    SHA256

    368c6f8c77cbc36b724913e8c5a293ba9bcd92d17e6a3e1ff077d6a0ffbb6c4a

    SHA512

    adcc73c013e71d31baa8f7c066b03cd06694abe3954a2de56feacdbd295bfbf6383aa193d5bf134033a8e79597f3b0f8c2f449e2d32c6eb65dd8bd55c825fbfe

    Download Submit