Overview

overview

3

Static

static

3

1f4ce9f866...41.pdf

windows7-x64

1

1f4ce9f866...41.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 23:02

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1f4ce9f86638bc92d08c50a9aeb11141.pdf

  • Size

    79KB

  • MD5

    1f4ce9f86638bc92d08c50a9aeb11141

  • SHA1

    a1155d215148b21f154cab40354f4a1faf92e0e3

  • SHA256

    3485d4acd57704ec1dd9ebc42f17f646996873f00e85e0b7c9c123023e77a469

  • SHA512

    525ad16784678667775d865f1971d8bb02179d606ef20b259e7194b63bd61ddac104e87bf9c494381cb1f6da5708c5544927568c79388498092ce1d61f21f76e

  • SSDEEP

    1536:nMm/ppX1V/SVkSjOrYEQL5GAJ908wmIZDencxXSyw8RlPGu7R8l:xPlhsLaEZ5pJ3IJenc5S8euk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f4ce9f86638bc92d08c50a9aeb11141.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3de80c69e259074105a2bc11aa17da99

    SHA1

    f1961f21e59fc072b760ffaa7287fdcae423a537

    SHA256

    3f1bce3fd7039c68a16336f4646ca6798c7d692f8c7115b38e1a563b81736c2d

    SHA512

    e0137690b7afc97dabd82eb7d63bb5e16fd3cc8dc9b929392681e6d97954b9ccf390885b40155af80d1405117dd7561f4a356aacf18dc806549adc96cc1105e3

    Download Submit