Overview

overview

3

Static

static

3

208a619a68...79.pdf

windows7-x64

1

208a619a68...79.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 23:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    208a619a685246e1e9964e93373cad79.pdf

  • Size

    87KB

  • MD5

    208a619a685246e1e9964e93373cad79

  • SHA1

    a77f9d9e9cfca7b8e05d57b2a66712536eed9847

  • SHA256

    f8783af8cd1a9d263cf4f6afd80edab6f91b05e7fc6c8eefbd0eb362f3cd121c

  • SHA512

    6e6a14e1e29a54f24fb655d307292a46eef17e64db536052e609d29c835b74c4ce2484bc3eccd45ba1f94fc1ac05839812d38efbc2fdc2abcb8bc213e35aa7ae

  • SSDEEP

    1536:OvRzayYIWruZIjf16XHtvj3EcOjsXuIE7+2CWv8Qny94JXRp1DCH3WUpO72mNS:+wyJWrowEd73Epj1IEEQDJBmHq7K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\208a619a685246e1e9964e93373cad79.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b49ad57c632255e3ee458be0e69d3228

    SHA1

    15c35d5673e082368814ca1d20cb427886b7d182

    SHA256

    591b4d1933c15917daa6aecdd3314e1af7f90514563d08a75216c3fd4ac59f7a

    SHA512

    34762ab3fee372a5edd2b6696bce3428f9b55c3c45c2c53c21e759f10a8032921e548b093a23eaa61949311c4c744bd93cab97b322d518e36629f954b8ae22fb

    Download Submit