Overview

overview

3

Static

static

3

191996f1ec...52.pdf

windows7-x64

1

191996f1ec...52.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 12:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    191996f1ecbae1d3eb531ffb48cc1452.pdf

  • Size

    42KB

  • MD5

    191996f1ecbae1d3eb531ffb48cc1452

  • SHA1

    c81e20539ca3a4271c57fd96230e6154a0e8bf18

  • SHA256

    b4a6b9bbf36f8ee796863c0772e3fc416ea2819bf08768640fa37d9c0df60548

  • SHA512

    138a454d11c8f0a4339ad3c328a98b38784db172209644e169e1fb5b56f53a01d2ed11ffcf807aa68b67a3eabcacdb77158582ca43276ee4849fe9e3a22d3119

  • SSDEEP

    768:jj9LP528CAzse05I/D4Ax9YL3HuKWvqgB3cW6MpQhA3nKHU2m0qXUl:jj975BCAv05lA8HHWN+MpQhA3nK0KoUl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\191996f1ecbae1d3eb531ffb48cc1452.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    486451f5eff8ec0c69da4bee72853ac3

    SHA1

    492e70b00501b97d2187127337af2323c855cc37

    SHA256

    5474216bde661a17cbf86341754efd6e5a61c7f0252666d4bb3b0bcd387ac7d2

    SHA512

    f9892008965dcc733b5429b211322e64c451388a9e6212b25f153a852215d8ddd8b31037e3e36ea155fd3f3b0854dc715afba3687a985633b68b9434a2e3202f

    Download Submit