Overview

overview

3

Static

static

3

13e2f884dc...dc.pdf

windows7-x64

1

13e2f884dc...dc.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30-12-2023 08:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    13e2f884dced82e898dec60e257055dc.pdf

  • Size

    86KB

  • MD5

    13e2f884dced82e898dec60e257055dc

  • SHA1

    7496d7100c8e51164af1fee2e30368c51c5c39f3

  • SHA256

    7d362402f220ba015c8a2b4817a3095c031f08dbc96a43d61333f11bf2db3608

  • SHA512

    c29939edc8dde3aecc4fbd9729f7ff293c0a7df2be81509ce9fdc6cc138e1885af28d87cbf87774e48485c89231399db9ded29313e08fb8c4e7fcf229c49a0cf

  • SSDEEP

    1536:fmwJzK23jfVidrVTp1WAkj5gSqouz1Th1RnUTJT0zsHxRdWOpOaZEW3rh9JiE/kR:+g223jNATp1fkjqSATZUTJT06xRWaZHE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13e2f884dced82e898dec60e257055dc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ed5b07ecca0a8218aea79ab4fbe5db50

    SHA1

    4e5ced9ae3589fb4c168a5b67f4fd46650d2052f

    SHA256

    9bea68362e151af4d5244ae0c51e939f911ce9f8171700d5ca342e242157f3b8

    SHA512

    c23a9f02c7f486d0534beeb05ab1210926d0464ea56c839e5ff10e232212d2616b41578b2bd87eaf0da5d4fb9bcf19537902743443691288462c80e599527d11

    Download Submit