Overview

overview

3

Static

static

3

397e37c73b...a0.pdf

windows7-x64

1

397e37c73b...a0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    397e37c73b4c98751a9e2edd839b1ca0.pdf

  • Size

    88KB

  • MD5

    397e37c73b4c98751a9e2edd839b1ca0

  • SHA1

    a7eee865736f56bb8b65a17e37995320c752d387

  • SHA256

    4097c16a9f3df54a3404916ecc6e478782f1b1aebf8067e5e997843ffd49dc27

  • SHA512

    5a291bcb59080f79ddd555849bb8f42de8aa7326ebd0101fba000e288ca978cdb1b5a86a4db060faf243f410557b123f1edc9106a4325a7183f120a8af65784d

  • SSDEEP

    1536:M/VlsJL0Y4+Bfx9PLVzRyG2697VmNRsZS4z21Q8+MeWtGRhJTGedWWc2LzlWspOp:OPIxZVFyG26pVURgS47Qnehx02nM2C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\397e37c73b4c98751a9e2edd839b1ca0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3d1b594497603ca397726b2ef2bd5096

    SHA1

    d71211ff9bd60c155fa57f4a1e042b45e4214704

    SHA256

    506d36df2c99fa0039706c6f8da304201b933ce4859e8f8d9ff1aa68748887a6

    SHA512

    ecb476df6bfe132da80d3002467e1011c233db171ec551ff870b688eda76e568a3a307e008dd2d3488761fe6944e79d611b9d4fabe1fde16c22da0e5e6596bc9

    Download Submit