Overview

overview

3

Static

static

3

0e48c01139...6f.pdf

windows7-x64

1

0e48c01139...6f.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 04:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e48c01139338a8117597a78a35d2e6f.pdf

  • Size

    82KB

  • MD5

    0e48c01139338a8117597a78a35d2e6f

  • SHA1

    214414fe477a0d05ca585cbd7e27287e3d99f1d2

  • SHA256

    b4b5ae5458eca4e4297a7475894a8f0c25ebbf8db7bbbc2bde13fe1d97a70460

  • SHA512

    210059e7c1f1732e03eb8fb55f61b93e8cccb19283d687c6a70a5841e45789e822e0fac52e5b8045e19b7a24b81e3f6c9db7e03b7fd82fbfc259696c422fc8d9

  • SSDEEP

    1536:KuE87o21DOH52okFZX5vFpt26WmaJAqUfTArzRycXAWkNpOPaWKImg4hoEuauhKb:aRaZzGjmay8QcPRqoThKkqj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e48c01139338a8117597a78a35d2e6f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a8f4a6af48ee34e77e3217b6131d633b

    SHA1

    75a55028137ed20acf287152dd6143883e6ae737

    SHA256

    ed9018afa1aa36e2eca196e1d3b10342fdb0df1dcf93c90aebf8a74365d721d2

    SHA512

    db9094f34ec7bbdb876a0f7a1c7e5d4d654544fec6ba8019b1e639589f1d304fa3a886463a334d03c10d177e8e35f92bb105faa8adaef68ec1fa856b83255b6d

    Download Submit