Overview

overview

3

Static

static

3

08d9af2075...0b.pdf

windows7-x64

1

08d9af2075...0b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 00:41

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    08d9af207573bf8035030137cdc8450b.pdf

  • Size

    90KB

  • MD5

    08d9af207573bf8035030137cdc8450b

  • SHA1

    4045591e41585e4582d775d1f58f1841a3ace5e4

  • SHA256

    55a9ad4ab0a09b33d43c3705a4a7eb38fcf1fbdf9519b1f9c312ab30e4290952

  • SHA512

    356f2d2e3ae72c0d2b9e1258d62a925d9bc0e56d326d1d470aae96e170f81fe1e62bf8443b72ad0cd1a4bc56d61765247cccc2bfa19993652b808f050de29b31

  • SSDEEP

    1536:G2g+CdXI11EkmtHDHieiZEIOtqWxWIh1s11W/H29WkNpOPaWHiMQGio1eu+JKAMW:MtyKtRiJCbxWIjS1GH2mPRiMQ9o1e9IE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08d9af207573bf8035030137cdc8450b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f6b0d052af6ae95f1c8d89da904e106c

    SHA1

    d1e0cc735fdb05281d8a93f1063309af58ae65fc

    SHA256

    eb79a83cca8617461e2b9fd3ecde0ad030fec5f8c361b6d7c5a6864ba6d6f57c

    SHA512

    9550147194c22cc54793119b7b5514f349aacb7c8f633b5446f66280032321bab6956bd0accaa3149d91614ace7981c183bc868fa6104a6ace63f68abb8c2661

    Download Submit