Overview

overview

3

Static

static

3

48b97f0c04...60.pdf

windows7-x64

1

48b97f0c04...60.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    159s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 10:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    48b97f0c04300aef50595e59e7d23260.pdf

  • Size

    35KB

  • MD5

    48b97f0c04300aef50595e59e7d23260

  • SHA1

    cbb378999218fcb9212e647197a78b1134cd03b1

  • SHA256

    2b944b06ebd2630b91bb96195acab848203233e8dc795fe14b40e0002054a388

  • SHA512

    b3be1ac910175970c9312dbf935aede702485e647337eef4e4a611dba2ba4d6a041dc8fdd8efdf86f40c8a489a659e335723d63642dbd9e6fa18b09049fae5bc

  • SSDEEP

    768:e+LCAcEIP7pcGgVQW91nTWq9I+UPT0MsOGqpf1o4f8nEzsWJ+JD1LGBK9TBwG:e+LCAcE07pcGgVQW9Hq+UPT0g5f1o4fQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48b97f0c04300aef50595e59e7d23260.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3a4bb598fb124e32065f6ead73631f9b

    SHA1

    5b98c187c48016526187f577feca1a568b92d3d1

    SHA256

    2600ab6c16192c5e925ba911d034d0e43649ce4b0913e29f162d268c55174baa

    SHA512

    dd61d47b4ab2708c5520606d6df705f5ab1295d1e76e1be54e224601477ab8d1730b1565519f1290797f28cc09b641415fb7c33273ba6c2357821185963619fb

    Download Submit