Overview

overview

3

Static

static

3

01e6f3dfa8...09.pdf

windows7-x64

1

01e6f3dfa8...09.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    01e6f3dfa8e32ff819ffa5f22e75dc09.pdf

  • Size

    87KB

  • MD5

    01e6f3dfa8e32ff819ffa5f22e75dc09

  • SHA1

    d1f41f70c3953bc9e1812f2bbfa681d60b938f06

  • SHA256

    bacd92f1de2d397507617430dd9b0c057f46e410d5db10642b2b96c4f156bc69

  • SHA512

    3a5d4cb6dbeb242f93fd5891231eecb71beae3d0287945e7710bbc2c4fd21c59b9d0d218542baf30db916066c0f26bc5fa032cbd0c642b26f564be85fa07828e

  • SSDEEP

    1536:PPvXPXAcYzgLODMIk5P3dWplaSaXh0HG66IZrUs4qlfmi:nnXmUOAIk5P3cuLmHG1IM4n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01e6f3dfa8e32ff819ffa5f22e75dc09.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e3301d28631d992ba3d19f5eb5c01019

    SHA1

    0b16644cbe2861f83bbb2bc061a208daefe054d2

    SHA256

    53c3e6248543b6681661857eaca467cab082169878971bf02324e879e86a745d

    SHA512

    8c442de05d8d2cb6e9a4924bd458022ed0a4e4b7e964cfec9f2038aa194046829d4d7abccb7334c8e91ced5f1e5f2d1c6110ad8c97be5070e275541edc2d0bfe

    Download Submit