Overview

overview

3

Static

static

3

0c365b936a...e0.pdf

windows7-x64

1

0c365b936a...e0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 02:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0c365b936a15b30af1681129a82ca8e0.pdf

  • Size

    42KB

  • MD5

    0c365b936a15b30af1681129a82ca8e0

  • SHA1

    8ef49c184f3c24558ba49ce045b527a6f14dd55c

  • SHA256

    c5fb873d0043010f1283b2ee80d18223c5e629449f4b193d2bb47a92a7bb379d

  • SHA512

    a7cb2c7408b35b4910c6cf340a26443d6011fb93ba4f2131edfa1fcc4ffe8e01826da80a474eb68f557b1aaa6a955224b7dda9bd886e6d4fa326c200102dcdb2

  • SSDEEP

    768:Ii10wS+PrkhDL9X97cfS9rsmS5lSvyu67tK1FxH4DKnG63PxA5/i7u5c2KA1kMJN:Ii13YatQFxH4DSf+/QA1kMJX/VK8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c365b936a15b30af1681129a82ca8e0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1279ac39bbc626377427bb5913a5ccd3

    SHA1

    31f5c50d59aa29b533b79f420e70cafa980c2d32

    SHA256

    b951b29e48c2a9007ed6fc3f51e561d8c3f07312e08e554bb35bca0e813ce5af

    SHA512

    b1a0602408b105fad3819f5219465e30114b8a1c12f6be73465d5d094bc1e36917f9fe6a1c7a6b52cd8878c4dfa8631c01509246e2c2167664eedb69a0bf56dd

    Download Submit