Overview

overview

3

Static

static

3

17903f5707...2c.pdf

windows7-x64

1

17903f5707...2c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-12-2023 22:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    17903f570711e6addff34ad6629fcc2c.pdf

  • Size

    80KB

  • MD5

    17903f570711e6addff34ad6629fcc2c

  • SHA1

    ea8155fb50f5cdc464227705cb27d8fb4462c639

  • SHA256

    14c4200482046c2e4c2211a8362b461abee0ee937964f2e19f4554f1ffaf11ec

  • SHA512

    3df5e370ca3ab801ea186b9db0c62f5f91e8dc84f2e2a57870890526b3b4cecc5b9b6463303d8fd499e3e0b4f2ad4e8a3461ed41dbf39d1ea2fcef532e368643

  • SSDEEP

    1536:9umQb1HCEnaOtEFGXdLXlBjWigNANHK+Bj2/XiysWOpOwrKWGG0gSoMUuJ:2ZHBbVXbWigaRKR/3JwrgGgX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17903f570711e6addff34ad6629fcc2c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ac74af1c95a4fd05c9877234ff5396bb

    SHA1

    0c25023e97a0c698a938295d51e8e2f71a372e7f

    SHA256

    7ed30f9ad3a3992b999b7e91e100416286e5d3a97f01f015daac22fe30b94601

    SHA512

    fdb2d946c2b0b5f8e94b0e56786493aa7ea44adef24f199a81cdcdd11d52fc073347f3b4f67be106779d7b9fc19fd599ea6b1918fd7ca1841c61f12f28e97162

    Download Submit