Overview

overview

3

Static

static

3

0ee803dbdc...da.pdf

windows7-x64

1

0ee803dbdc...da.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 04:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0ee803dbdcb60a1f04f04c4b02715fda.pdf

  • Size

    86KB

  • MD5

    0ee803dbdcb60a1f04f04c4b02715fda

  • SHA1

    3a211df601043e11656de23f0748184694e1087d

  • SHA256

    8d2d55cd0dc64bb7933595393374db28c04b5d00adac0f027f539ab7c5c8aa4d

  • SHA512

    0d3fb70b55ee1c9e80bef71cb07f73a3f1f3c1b3a7708ab320ca84e2fc98bb62d8e064f1f9b649d3ce3dbc24300ba3e2ac228f45aa6125cdf753e8b61570517a

  • SSDEEP

    1536:mZrQBMMmg3flypg3Ys6S02QtnYpfNi8o8KWkNpOPlOhPdWerVXRhBkaU84Zr:YvM9dy+3Ym02Qx4fNi8o8PPMhP3rHhBO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ee803dbdcb60a1f04f04c4b02715fda.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a2ad57b879f8d7cec0173befcd5d16f0

    SHA1

    3f56a5055fc24ac20a3ba5f63c6cfb9d73249060

    SHA256

    99c02e6afb016de5f578af909799d356253f7ee8c44230b05d0dc6a1fd0d341b

    SHA512

    a03932820f1aedc3b0f4f058a995402837a1ff9f7efa75db06cbd926f7e7ae64e86342d5bdcd2752f2693e0b3a492bde45e405c442c5b6b22354af157f26fb4c

    Download Submit