Overview

overview

3

Static

static

3

411ee9d2db...d8.pdf

windows7-x64

1

411ee9d2db...d8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 14:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    411ee9d2db69c4dd804499749eec70d8.pdf

  • Size

    46KB

  • MD5

    411ee9d2db69c4dd804499749eec70d8

  • SHA1

    154b432b1c9dc9da0e1cdc1bb244c4d8beebf47e

  • SHA256

    f7409fa55b6f2727951b0dcf0ece2d69b60457fc1c9d90e1f8f8664b32abbcda

  • SHA512

    dd68ed33c09e71fc262c6fc46b03b3f1268fe8c234ef714055c2a0f6428b427c0f6d8c7abfc0b053761e3d0f04bc0bad7fd2e0e065ea8e2851eefbbb17b8aadf

  • SSDEEP

    768:dZT8YFB6hr0i5gripaqzq+8qaTdM/7xOHVFA/mWPFvxN9BjWsMWw:PT/uxgripw+BaJM/7g7A/jPFGsMD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\411ee9d2db69c4dd804499749eec70d8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          00dd846e482534ff74f0723652c823fa

          SHA1

          2d050c14c1d3c5309a593ceaeb23c3c108eeb74c

          SHA256

          ec7fe34b73fc239beebeae4b51d802b589960ecb2cc5e0d0df5241eedfde16fd

          SHA512

          b9dfa0ae046a3a4f8c94955c1644b41f8e5f5938e91f789b27128213124c6b4a2a26a24ee996e7a2166dfd0cc0e976aecf67719d2a82453927c219fe1c9de436

          Download Submit