Overview

overview

6

Static

static

6

053a980f0d...f3.pdf

windows7-x64

1

053a980f0d...f3.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 22:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    053a980f0d03d7a9f3d16318517712f3.pdf

  • Size

    39KB

  • MD5

    053a980f0d03d7a9f3d16318517712f3

  • SHA1

    b6a689c227999bda1fe097ddf5dbd5e68d9b3887

  • SHA256

    f3870113f70abd234ac21c2989cb2b6735f3efcf7070b0474f8f5f832e5bdb92

  • SHA512

    b75af6f87ce7ea14434077a1fa47f941aa9b46473c83d503471bb735c491114f67ddd543003c26ed9d7668997575c1baa840009bee5101bf715738a3fcceca43

  • SSDEEP

    768:U3Tamynqzd1NIYZDgve/fOp6+CBi5xLeD/EVY02yJJhgKHqQ/8jyIOmkXe:U3Tmn4NPZSlCBoU7OYqJjxKQ/HO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\053a980f0d03d7a9f3d16318517712f3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d639591f43ec7cc23278d0a1a835b863

    SHA1

    264320ef72f64c7690c520e9618126b52511f4f2

    SHA256

    947015306680bf8cc639fa1b9df0a9748aa1e348652fbeb9441477eec3930c9c

    SHA512

    fd3a3ea27c1a7ca0fd97e30584ae54165034fbcea9e9020c10441dcc367698417d92227285479ca615241494dba68e8e7aa71b60f56e69e92b5f55e9e4a92df0

    Download Submit