Overview

overview

3

Static

static

3

3ab5687666...90.pdf

windows7-x64

1

3ab5687666...90.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31/12/2023, 18:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3ab5687666e717eaa33a50ffd8d82b90.pdf

  • Size

    35KB

  • MD5

    3ab5687666e717eaa33a50ffd8d82b90

  • SHA1

    2ddaa41c5c3efc9526e91f2065c2ec5da297fb33

  • SHA256

    60e2800b216710612c7176a46beecdebf6c4408a0f48fc258d945e80dc7f9ae8

  • SHA512

    e26f7a0433737c0132c96a51dc9a413160f0cf406901a41f35744bdef282c0376d43fe6cf1d21636a8635bd3185ab478ce6dbf0b6c115a6382d1dbea4b606d01

  • SSDEEP

    384:qLXCZtb+jCdL+vTGKUZxGmtPdUHpX/TWakmJ4HNN9ECUSWIUe1R0m5LZbtdCUSZ:qLXCZUjCUvFUZvoHpXLWPSGyTe1RnnHe

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3ab5687666e717eaa33a50ffd8d82b90.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          f945f1d38a1a8452872306f8d8c41e19

          SHA1

          b257b9d612b948556cea3b3fc7d21670a608bea2

          SHA256

          bf66d49d16716f903e326b430933d9ade02ce93f9e48b5350cf54c7cf1475a95

          SHA512

          3af46c5883e70ef31e4972bd32e7694c404f0b154819b309991ddf9f472cbca9bd7d493447478e39aa07973ed1f35e6e318c87b32819c042835ff68d636d19f8

          Download Submit