Overview

overview

3

Static

static

3

2f3ae858fb...49.pdf

windows7-x64

1

2f3ae858fb...49.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25-12-2023 17:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2f3ae858fbb31cbbc94331b957e17449.pdf

  • Size

    78KB

  • MD5

    2f3ae858fbb31cbbc94331b957e17449

  • SHA1

    e5d1cfac82723b052dc0fc2edf8fc1e9a18da715

  • SHA256

    203c60e7be9c42d0c2ad392329dc530426be0a884aff834fd8a8919b9774dc4f

  • SHA512

    c171b5aefa999836ec7075474f9fcf8be56d2196184e27b37fe6f6bb1200ca6dfc51a629384b4e86fd06414ad7b047c6c276fe3128bf31d5f0e86fd4bf23c363

  • SSDEEP

    1536:xveE3oIi10QWvZcKhkU/tSDf8Tok5KSSPhUbpn1UmboOEK1HDmIV8LKWqSg:VZ3oz0QWBxeOtSDnSSPhOpn1UooxK1Hz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f3ae858fbb31cbbc94331b957e17449.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8c75519553c3bf7f1f64eed3d96c5df6

    SHA1

    7d8ab6bf86611dd85fc9cddd05799b264d4fc1b7

    SHA256

    935552880580aa448b66561ff8ddb5be037327d8572368a42cb372ea881c3272

    SHA512

    641ef208cf8afd5d88ea9061c75c8c40e8f3fd03531ec4401cdc513268cde734664cf15a600e95fa328f3c2c3a5ff83ece1da0539903672873f08ad7c20ca981

    Download Submit