Overview

overview

3

Static

static

3

4930941304...11.pdf

windows7-x64

1

4930941304...11.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 14:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4930941304e589314dfe370055b7cd11.pdf

  • Size

    83KB

  • MD5

    4930941304e589314dfe370055b7cd11

  • SHA1

    aedef0b53fdd9f7981a1178afbad988359cd5d8e

  • SHA256

    d8477bc05d84ff12785866a947b8acd6af6bba01de26931ada0eb282ca248ccc

  • SHA512

    d6f7ca5215693034a70e38c38ae3cf17116ae52da2f998a05675ef7e3702a3140eff20e28811382b3b9f1f47c6ee0f2bb6a6c46450ca5f461b63c4883ac628f5

  • SSDEEP

    1536:Yo9OIPC6zrsPLn1OMqEfRq59WHc3wbNC5x9CxM/9rr0tDachYxWmBhBNFgg03us2:RgIPKLN1JsUa/9vXXvFgg0eFXh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4930941304e589314dfe370055b7cd11.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2676

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5991ff0526e35b3afe7275fc70b2cb73

    SHA1

    aafa92373632e4fbe3ea52e80486d131f3940ccd

    SHA256

    08022f360b03fbe8a7fc5fa2452e6b9ec8e4fe8af338c162635512858b884dfe

    SHA512

    2be8a48e16b5a19ef3fe89cf2e617e238bdb38e8a891a82c48ad46fcf4ed5f62a6606957763a23e3bd61d12a5ec50cb4a99312f9a25ed94016e2bf67e62d3e5c

    Download Submit