Overview

overview

3

Static

static

3

29c732aa9f...68.pdf

windows7-x64

1

29c732aa9f...68.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 05:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    29c732aa9f7737950efd6152ddb3bd68.pdf

  • Size

    90KB

  • MD5

    29c732aa9f7737950efd6152ddb3bd68

  • SHA1

    77356e4d2fbabfcd9ba242f8efc09aee2bdb4f5a

  • SHA256

    350cdb27f6cf647f5dbe6a4233c37015f2e67369c88577c1cdb1d79757f23869

  • SHA512

    3768a24fb645f76988b15d3c45940c18950d9afc6af1ea45dcaa713932b21557575b3e5d75bc2b5bbc61877c2714342762939d5c403cb9284740bd2d718daf87

  • SSDEEP

    1536:ADi5YN/s2cn6/XW0E4R8ppnjxDT+jY36/e1fnKNszWBcD2gtcbBh1oZeYyWUpO7m:75YNsQ/Xv8L0jBeRn7XtGVYt7m

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29c732aa9f7737950efd6152ddb3bd68.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:828

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2f41073fbc6a5dfd8a7d30d24535c2b6

    SHA1

    b699a8424f80f03d672dfce300b24345e240db39

    SHA256

    82be6c004dc1e7a75fb9869d3ae897e7544c207cca001c9f33bb27eebed12c1d

    SHA512

    16f7d5bec3bc56dc7284f7029b5e4ab0083b6a8c96aa6a0d73b9598ba2337863287ad8965aaffbb10236209e250cc5a090fa6048dbd5cb0318e6d7c736be7e54

    Download Submit