Overview

overview

6

Static

static

6

41d866111a...c9.pdf

windows7-x64

1

41d866111a...c9.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    04/01/2024, 20:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    41d866111a157e7ffc356a46338a63c9.pdf

  • Size

    57KB

  • MD5

    41d866111a157e7ffc356a46338a63c9

  • SHA1

    9f52dbc2851b9a39f5d7f53eaae450b380f46559

  • SHA256

    e8bd8f7bc4f87e5239654fa1489a431b40af72eda6d121708162e304ab70c2ce

  • SHA512

    140de1d0366223e0adc52adda6f4cfa34e38c173fe465f7f4e9a57ec5dcc08a6ceae128424c23cf823037ee1a60ec45a5f8beadfa567f09ca4c3eca7e739f50c

  • SSDEEP

    1536:EOnOj//LXfte/DaojURYc9poW7xeKWIFbOu6mrS9C:RObLf4agURYcrF75bOleS4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41d866111a157e7ffc356a46338a63c9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    423f07cb125c5d47ebe3b25455e908d1

    SHA1

    12cd5c46992bcd1c24709e63f2d7c6e055fbb0b8

    SHA256

    363091ef81ca673cacfca38bd3ef5c2b9c8a0240b7c5ae6675241081bdd606ee

    SHA512

    eb7c60da53f9beda7754bba45061c2fa7e3d23d114105cd5eb0ad957cc8718d500528943cb06fe2ec463d618852a412abfaa1025eeac47a11b9900e95513e8b8

    Download Submit