Overview

overview

3

Static

static

3

475d52a7c0...9f.pdf

windows7-x64

1

475d52a7c0...9f.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    06-01-2024 22:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    475d52a7c0c48c7269f008f1698fe19f.pdf

  • Size

    90KB

  • MD5

    475d52a7c0c48c7269f008f1698fe19f

  • SHA1

    f70b3bb84609ffb26ac0c6209e5332317a936f86

  • SHA256

    c0b0208f30ee8a2d628b439583a7a0666c51ea166c410e6db4ca8ab86b7953e0

  • SHA512

    2e5a84027022d390ea33fe2fdd63edbfa55a540115c401238c5610e094a24ef727fdde7cf6d687f6355c5f0973cb79eefcd211adf681ccbf6dd7f9a05c66f56f

  • SSDEEP

    1536:1kmjvMllDev7BLHK4LXp/sPjuyO6bkgR/yEJWczz6170mWV/Ex2RXpwYe1WUpO76:ZvMDuLHlp/sPj/Odw/ySL00/9RZleY76

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\475d52a7c0c48c7269f008f1698fe19f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1996

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82cc693f90452d0a07af5dd3cb578874

    SHA1

    c920e21d4932a0e52c83c532cf1411ed9dee4c62

    SHA256

    d94f6b3e45845437f2a4f7f24b2223a920411bbf394713b2ac49c1915616be90

    SHA512

    f8d839e56094551a8062b19ecd12aa17ddefc4e6f3e9fd0fa03a2a57094b3bd47a6373aca3e3a2d18d0e939ecc6e2078fe7fcd7959f683ef6efe76d20a6e408b

    Download Submit