Overview

overview

3

Static

static

3

03f2a32d8e...c4.pdf

windows7-x64

1

03f2a32d8e...c4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-12-2023 21:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    03f2a32d8e67c2d510f39d98a9272bc4.pdf

  • Size

    85KB

  • MD5

    03f2a32d8e67c2d510f39d98a9272bc4

  • SHA1

    2ea05c6195293adce4d18a40887e11b36b510754

  • SHA256

    6537b7d007ba0732028a39bfccfea96a92db2611b26795c5de1fb9f0bd4f6e6f

  • SHA512

    c7a375cdcfbc37e82179bb6a82dcd953ac63233ac09e01d1883db7eda1f013d8e41187053ac0993f3f7b95cd50cc7f866a9f9bb43206e3cb357803cfe3baf2f0

  • SSDEEP

    1536:bzYcLgkbuJzl2psjdnBbWsyWIx2JuD/wox53DSIF2jWemsfPSnW6pOu210YkL00t:IWgMil2ej9B6LWaJDIox53DLOTfa8u2e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03f2a32d8e67c2d510f39d98a9272bc4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    090ae79dd38334a8ffe5c61e154b03da

    SHA1

    fee6cec8d617634d67f3e6bcf5690ef623cea4bf

    SHA256

    ae22e07f26694572cffabfc0212b324b702465db91c02c8749b455cccd986d66

    SHA512

    f46b324e522c8420c0966fa5350eaa363f0cb84523a0bf40e0458349d9b11dc2096be57cf9bc61acb916ae2322c45aff5a63d0bae0fdaa8a47d3e87c34d3a492

    Download Submit