Overview

overview

3

Static

static

3

1bd3bf0e05...fc.pdf

windows7-x64

1

1bd3bf0e05...fc.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 20:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1bd3bf0e05ef05d65dd7b95b12f363fc.pdf

  • Size

    78KB

  • MD5

    1bd3bf0e05ef05d65dd7b95b12f363fc

  • SHA1

    ec091f371367b43471eda1caa626d3900bec5e17

  • SHA256

    25bb2ab3b6f237e6081884777ca73a756b95959432d3765e3fd3fd1e6a2e8af4

  • SHA512

    1c226406e26adb7dc79089da8eb1185aa6cee9bccb46aa5a25556762abea6f96ddfe24ff22922e9a693f9e4c5e6c9ef86c4df4b937780417b7ea7b63a9978eb1

  • SSDEEP

    1536:2iKn5SHLOOl1YCZXlCzn1K4+s3NKu9pIVOL/B2TLWHpOvczWrxAWvKFBmPOhZ4:fKn45gu6n1oxqpIVUBevUWrx6FIPz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1bd3bf0e05ef05d65dd7b95b12f363fc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b06895b24ac6d0d9fc92f251e0c74d22

    SHA1

    fac6544abbb3e6fa2e8b1547351dc3c4e99f3a42

    SHA256

    b494d024394d4cc9b924c5980fec84362ab2da1ff6ba838eaa4de6bb33fc9e18

    SHA512

    9239f31b4300c050beb062ae2b39102750d2008f621b8a55d7a3c887159da06c632db4a5de331dbf5e6a952748e167ed96a786c0159149538149d2d450505561

    Download Submit