Overview

overview

6

Static

static

6

509662e193...a1.pdf

windows7-x64

1

509662e193...a1.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2023 03:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    509662e1937524cecba1167cfd0ca5a1.pdf

  • Size

    44KB

  • MD5

    509662e1937524cecba1167cfd0ca5a1

  • SHA1

    879243c49b8a7d31e2758eea1594cae91aa2cfba

  • SHA256

    5cb64023c6cdfbb0ff5358041ca4b27b153c315be2bfdb974488dad5716a2749

  • SHA512

    3fe6f41a802f778c90e169934c3706e433ec2c82dde13e0e6db5590fff62c3b2990bd561792ca1d7c4be1372d4e67e92238287a51c9df9beb5bba0a9341d0186

  • SSDEEP

    768:kgGzpDxpP5GEPrle8r2qIOjZkYJJhu5NVT7UJx0s13zJPj/zCnUAoKNWC7+91TKF:RGF18qImmYJJhENdIn0q3zV2nUAoKNWG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\509662e1937524cecba1167cfd0ca5a1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0f8fbaa09844a0430c1260c152e1db18

    SHA1

    f3f2cc56dbf84413c64dc36c14a3cf3fa7e4ba0a

    SHA256

    c6054cfdd06ae0e6ed55665b490c1162f35d698bffc450b99cdcb5a13821ac27

    SHA512

    f17229999ebda7732d09f63eba7ab423d8054eba56e0f6ba7e46c2684b78c977e3f6d2327d38341ee64794aad2730d055a925d65fd442b147308eebc86df0aec

    Download Submit