Overview

overview

3

Static

static

3

0faaedf918...f4.pdf

windows7-x64

1

0faaedf918...f4.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 05:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    0faaedf91854468285c7bac6d09308f4.pdf

  • Size

    84KB

  • MD5

    0faaedf91854468285c7bac6d09308f4

  • SHA1

    b99e13b31743a3cd384ea3813aca19ab07f076e9

  • SHA256

    c4f962713f5e39429cd95ce91843c6f5a5f67e19410fea6314db72cb2f6096ec

  • SHA512

    eea15fbd24b6e62ec2eae8e786cb48ed8473510953344f4377960e6d5f34ee144851eb12927531bab7e052677fad107d7ca982a646aaa92136bbf0bf6f12f782

  • SSDEEP

    1536:S1/G4jj8zPa7smMnGnF2jGYt3/RWkNpOPE704vWmWSl/wULWAOXfs:+QDaQmMGYiYJ/aPCnWi9WAO0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0faaedf91854468285c7bac6d09308f4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          6004b762df751c5aefe292e8f8fec260

          SHA1

          8aa86a874794db78029482e5c27fdc07de057bc9

          SHA256

          2aae83751ac03a2b9463cb63c2d2a6948d451b05cff3d5ef864c4fd11d4dca3f

          SHA512

          9fd15458a7c0de659938f0bf68fdf258713554fccad0559f78b48cb21cbb0090def176ebf976bd871f4f6b81d452448824b2c36ce75d654ed7c8e7a3571b0df7

          Download Submit