Overview

overview

3

Static

static

3

131aee051b...88.pdf

windows7-x64

1

131aee051b...88.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 08:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    131aee051b66380483f1713265ec3188.pdf

  • Size

    107KB

  • MD5

    131aee051b66380483f1713265ec3188

  • SHA1

    47c398cbde464f7109258e999c56a51e8dcd942d

  • SHA256

    1e877e716f6877ce03bda725c059238999cf71ac608598b7ebb4053fe72a6210

  • SHA512

    03a42957ce5529c58991a1f21c5a36d5554e4d8b1ba95753be9af0ff9e6d7018ec8d5782d6a44d3f0324fc57fb86e125268b21a3f2be064f64fc272251ae1eae

  • SSDEEP

    3072:rUCnKHeXkG+QT3OkMPOnI8IjZ/I/4r5QbPjeOi0Dl0ro:nnK6h+Q77MTvjiVc0Os

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\131aee051b66380483f1713265ec3188.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6c71a1ad8c6dd140a64d5969eb93f473

    SHA1

    ca5e10d476d9c5543b2d0905f6c59aca904c2e69

    SHA256

    118e6988726df3dca914e31346c235d2f2db2be8f0c15721593fe5ffe4658d57

    SHA512

    c552b522a040bf22a00e9d74493450ea0c50931895378f1a7ef8f07502bf041295700e2f26ebb01c3a225e136a070dcb6890680dc3f2658673f00919a13ec318

    Download Submit