Overview

overview

3

Static

static

3

50aa389b98...d1.pdf

windows7-x64

1

50aa389b98...d1.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 13:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    50aa389b985f5c28c9802fba040bcfd1.pdf

  • Size

    82KB

  • MD5

    50aa389b985f5c28c9802fba040bcfd1

  • SHA1

    50547ec3793d5bfb5efe514d8bd5d52b095c14f1

  • SHA256

    e6ea5145a3d047ec1287a09e9b7ac5357a953a985bef0d578bbe3e630d52ddaa

  • SHA512

    a07a894f9890e959d5269c1b6bff1dbf80c97497bb77dae3fce49874fa759c0814566ef9bc323533306e3357e287ebbdf816c1e9e3bd3d0147e005cab936e7b7

  • SSDEEP

    1536:fDFnsuF5qc4CdU5yHjrsTdRrDYvI51tB5tkAhtiSSLcwazOtvxDLlW76CLLHBX/8:7l/F5qnxysXr/L/0AhM55xfylLLx/oRN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50aa389b985f5c28c9802fba040bcfd1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9e75d572ba1ea209a161ac5b921f0849

    SHA1

    6f3b6ba499e4cc73e82d1ac11deb7b681e555539

    SHA256

    cce1ee5bb97454cf13ad849e8641c6b3eb05859f6494f69ecb464bf4750e7183

    SHA512

    9736db13a98f6d6a8fc31b4f95042e3e979be95b9fda60948c332deb84749273f5fb8cbf5aeb7482676c6c08f0211c1183ab1506adc017dbb91b714267291695

    Download Submit