Overview

overview

3

Static

static

3

41aa1be800...35.pdf

windows7-x64

1

41aa1be800...35.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 19:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    41aa1be80027790a4800510338dbe835.pdf

  • Size

    16KB

  • MD5

    41aa1be80027790a4800510338dbe835

  • SHA1

    8891ca5a72bd37e540104ef2cce06e4a5537de80

  • SHA256

    e53561504bcaa7cc3490d76bd64767cb41b0cb3254bba6a1d564691466ab76ff

  • SHA512

    2cc14aad32c3294ffa3e2027b92a9280d0fae82ef1b86c0fbd56df8b851c9016ceb605db41ee197d9458fe0027c0ed1e8d04953fb2dbd0fa271b8e7c8e4ab170

  • SSDEEP

    384:VzZvyhMQz1WI8nqi6VEUwQSpwd8/nvxhuOXt9SmQ2Ury:VzBONz1WI8nqi6VEUwQSpwd8/nvxhuOL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41aa1be80027790a4800510338dbe835.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bdabb237436b97f0bb2038a116749bb5

    SHA1

    c30c04e8a8235e5dc1594fad02f0294ea17d7956

    SHA256

    d46dff2e4aa23c521dec54e48e2e8c044aca2f13f0a2463a2b68c66c503e5818

    SHA512

    4a08f0094220d739c10e18d5e4e71404a80393dec851331d908aee204ac85be72ee4e1f61acebd632b8e53d5f123ce412ae170edf6070f66a03a64d0137eadc7

    Download Submit