Overview

overview

3

Static

static

3

2481cbd320...b7.pdf

windows7-x64

1

2481cbd320...b7.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 02:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2481cbd320cf09aa2854fc1b0cf7f8b7.pdf

  • Size

    44KB

  • MD5

    2481cbd320cf09aa2854fc1b0cf7f8b7

  • SHA1

    d1fe46549207c7bb194a876ddeeb2b2a9f539c5b

  • SHA256

    111c82d53f8e5c71ea649f69e36b655ed7b1029d5aa8f925e5b12468cf667c53

  • SHA512

    96a901e0fe5f50ea78f9c3b481ed59fd9ff640c4e2d5c523abb9479883d7d81f4d85052035dac16db07fe6bf81fdc6327555c895cb6b363f88cb9f8c371deb58

  • SSDEEP

    768:Nytt2LNLInZzElyBxms5tiT0h9qJVhHr2U3gUzegD888i:XLNLInZIT0wJVp2U3gT88i

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2481cbd320cf09aa2854fc1b0cf7f8b7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bd6efec4707ab7e50155a7acbb75a7f8

    SHA1

    5672f8b4ad666475b4782f47512d1ee3ffdf7d27

    SHA256

    d5792b6597028af9dfe3e24e447bc9459cecef5e081dd9e94db20e003f87b506

    SHA512

    74ad53c60a3ff721b18f74dbdff4c222eef95c24f8ebb520af0f420afdb8a35355e18c09c658b21cb840fdf656f0b77260b22a3fa7e29f5a15e116603abc945c

    Download Submit