Overview

overview

3

Static

static

3

201b26907f...a9.pdf

windows7-x64

1

201b26907f...a9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 23:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    201b26907f9b1c337542f3e47c651ea9.pdf

  • Size

    34KB

  • MD5

    201b26907f9b1c337542f3e47c651ea9

  • SHA1

    d81fec853793daa843079a91ee626041e7befb5e

  • SHA256

    95346079b00c04214370c487a149ff841620d0535321d24d7e4aa1d504323f74

  • SHA512

    4c22f18b162bf818c2d10bffe4167f5561ce30e5ebe3561f2512b87376a7216973b89a1b7a98401a619afe284824a9f24cf475ba1929104541cbe02e33866803

  • SSDEEP

    768:4sVq5nI9h0EZsm/gsi7vczaCiMM/jxjR9FLegVEJSDeq5QuR+WLcwG8o4:4sV2Ijbd/gskvc2J9/jx1PFEsqqPghqX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\201b26907f9b1c337542f3e47c651ea9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b67bc4bd9ac36b1552826210788b107d

    SHA1

    f522b2ff4ae3960266292f0ef98fa672d1675865

    SHA256

    c0a8db4e6b30bd3ab3f6cc063258c7df78d800bfe984a9ae9d866093b4c2f3e9

    SHA512

    f847b879e8f5118e4ae1758d7483a68224d4e5c6d2fc63993fd77381b04eae7768ea958f7a46d1c6f798cfb2a26c859e10546f9a512ba44bb57c3f6494853a6c

    Download Submit