Overview

overview

3

Static

static

3

0581343a2c...a4.pdf

windows7-x64

1

0581343a2c...a4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    29s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 22:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0581343a2c96f0a0395b86f486e0faa4.pdf

  • Size

    74KB

  • MD5

    0581343a2c96f0a0395b86f486e0faa4

  • SHA1

    114d9d6fa4ab5f39af566f6a525a202092e77e0f

  • SHA256

    0a6b2c23331a80aa1a7a2f89d19b322949f059c3f0f26464526d0678efa988dc

  • SHA512

    bffe719329be5b62dacb9a306eaa3b7ed143b529c57f866322f4b8cd3813540d1417ed36ce9b55dae8c86d25bc4debc13bf68edba6d008bed970d9e3913007f5

  • SSDEEP

    1536:FcdtescIO2F83B7Q1bxW+oalbOdEyFDO5NtkkYg1XxPA:/scI3F31dWyxxXLtSg1Xi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0581343a2c96f0a0395b86f486e0faa4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    734b4bf7e6ac9f3f2c84909fa15ece92

    SHA1

    3fe36f40fb8b63352f1d5b40d87ea767be6fac15

    SHA256

    bdeba765a2190edae4e7ed87a4254f4c925576c73a0369ed29aeb9d65260e939

    SHA512

    98a1fdc4cf1a48ef2f0fd94188a5ae848636a49590304fddb6d956588e74d76eddd79b6427edbdcef61e4230345f5db893086b8d3777ee82762595f81a1bf69f

    Download Submit