Overview

overview

3

Static

static

3

f6bb0ba388...a4.pdf

windows7-x64

1

f6bb0ba388...a4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 16:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f6bb0ba38836664ceacd9956e8f606a4.pdf

  • Size

    46KB

  • MD5

    f6bb0ba38836664ceacd9956e8f606a4

  • SHA1

    0ece2011ef80d1450463d12a8be94973ba769dd7

  • SHA256

    75f1ebe7fc4bc1fb920b9b319fe76f1dafac54162211dd694011d4fd3d862911

  • SHA512

    3f647148922c1be9b4d4f6135b94a22c684b21772608a3de420245e0cf64e4928a88aac473ed947fec401fa30d6b01cf9df42fdee86d3a009e608d1620fed52f

  • SSDEEP

    768:SncBTTUxOqAEGzqRAKPY2SV34SMYFDxeiNfTmnL8Bx8IrhGnfBq+:SWWAEFieYXpLMOdeiiLw8iCBq+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6bb0ba38836664ceacd9956e8f606a4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82c640eade5bfe48b6844730aa81d76d

    SHA1

    ad83fc3b47b9b4606569a8b72d4aaf223cb70608

    SHA256

    adfde538d15ef38d1053af485a2d893c691ae2596d5c0a4c0d72d2e534f2410d

    SHA512

    d4198a9060f18ff3cbddf6b7894dfc257e252d344407c3f22236e8bd6bcf31f4f76db23812f2c5f6e46d1ba82fc175998a6a87e11a0fef37504e4f01af78fe75

    Download Submit