Overview

overview

3

Static

static

3

1880f4534e...b8.pdf

windows7-x64

1

1880f4534e...b8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 12:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1880f4534ea929942a6132c36c3ce4b8.pdf

  • Size

    87KB

  • MD5

    1880f4534ea929942a6132c36c3ce4b8

  • SHA1

    e9865d210785c2a6f74b4ea82792a5718ec27537

  • SHA256

    dc7af40be2d5619821d73fee69e0b09de9438667ecec114289c25cdddc5344c8

  • SHA512

    7abf0a458f092613d81a1fb16b7269510100f6a68cc249a0d1268f39dc7c8c2a2a1b1966c7367e0f3559002a6ff924d19eac3f4ebc36e9d76523c1cc9fe1af46

  • SSDEEP

    1536:q+EKgCchdwRHLaVkKnhgpQnh2FFNBMy2pIp4ZWkNpOPaW+P9AEYlX1Kz/:GGcLwRWjuQnh23Nh2pIfPUFHYlXc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1880f4534ea929942a6132c36c3ce4b8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c5ebff8d2e23e9ff63fad950d7755f56

    SHA1

    068c7ac4b0f944ff8e34e6c02c25d9cdb1038a24

    SHA256

    387aa0e469b94c7e35bf9eb6c3a70c34eff23ba33979ce8d6567aff765ec5ec4

    SHA512

    2d80e1af3cfebfd308fe0699ab83a72923a3b35b243713b3bd6213a783e48f3bf8015ec4f9914e4393f276fba5c619fca0c6bbbb24e5ef80ee70bfefd0d66746

    Download Submit