Overview

overview

3

Static

static

3

551ae633f8...82.pdf

windows7-x64

1

551ae633f8...82.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 01:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    551ae633f8cf20ca2a3e5cc5294b7c82.pdf

  • Size

    43KB

  • MD5

    551ae633f8cf20ca2a3e5cc5294b7c82

  • SHA1

    2f4957c2107e0d96c3b1344283ef1a50ddd1afa0

  • SHA256

    5503cc37a0f8d6dae78e51538ed92a345254cf1cb7510e6e4b6cc23a4993cffa

  • SHA512

    ed3c14b05f46471e3d49c15a11df0900197924ae729e832d77de605276054fd31d95f911bbd89e2047ea8387138104160fe658a38b7813c80611c7aa5c40d593

  • SSDEEP

    768:ktBj8nzJhl/V9pV9HBWIbytZdipzqbSYFv2qUehOZ+P/Qei4W0N11:kqzJPN9pV9HwtZdfbS8v2wh9XQei4W0R

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\551ae633f8cf20ca2a3e5cc5294b7c82.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    041d129403f5f7a2081ae72e14214c2d

    SHA1

    821c0575caf00b67ada7763935f7f2baa831b423

    SHA256

    743f868ff01aa5e54e203f7652e6fbdd6acd2c6865887510f8b4e3459d646f5b

    SHA512

    d6251bbe43557207eb029009815754538f538855092dd529764de1d475dbb4a1bd2fba5edc34fa2e946d4133b3c7d07515506987c593dd499ec428694a3a316c

    Download Submit