Overview

overview

3

Static

static

3

46800eff4f...b8.pdf

windows7-x64

1

46800eff4f...b8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    06/01/2024, 14:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    46800eff4ff1dfdc35c9f6dfc75fc5b8.pdf

  • Size

    483KB

  • MD5

    46800eff4ff1dfdc35c9f6dfc75fc5b8

  • SHA1

    ac58bdcc52ad1a7827b16a4c75afa5a26dbe1690

  • SHA256

    a7fe2d51168dea7ec908a12e6913060973835f0bafe296428ccc4b7aaafabe2f

  • SHA512

    f80c79eed24ffd140e57d736a0dad375572ec1705089b40b6ff44b89647ef75f36ed285ae1194c76358ced68d94bf85d7a2332cd1d07c99630d738053a837287

  • SSDEEP

    12288:LLOwKV9qTcORwBdyXvJmbUAzlhYzCrOfPX8XOV:LL9/cOSLyXvJN+WCrKPsXOV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46800eff4ff1dfdc35c9f6dfc75fc5b8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2956

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          0e748a405e00517d89ece7637ad2a10e

          SHA1

          c7e5ce11d04f69461562f150d4b73eaac371fcde

          SHA256

          58a0ed06fc98797602f10be5c5cecb65dcf86aa67e631a1022f090853b19ad82

          SHA512

          90419ceb1936c99e04201c300b51fc9d935b832a759f03b659fb98b6240e840fc66d36aa2fb79297df7c791bf4e507001d0fbbd713e65f5b744c5151a5b716d4

          Download Submit