Overview

overview

3

Static

static

3

55d786b784...45.pdf

windows7-x64

1

55d786b784...45.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/01/2024, 07:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    55d786b7846377eccfbc80ffd46d3945.pdf

  • Size

    247KB

  • MD5

    55d786b7846377eccfbc80ffd46d3945

  • SHA1

    1ef463313b7b92e1717cd7bc7c49960ba7e95eac

  • SHA256

    ee9f8cf71a4cfd5533065fe4df9388c9b81d7a70383798cf94a2fcaf39ba9e79

  • SHA512

    9a66a2d10f85dcf0b5949c24cf81f4ac80291e4fa41371fdd006d504c840e2baebfda041cbc539f694ed080c74a496d79e7750b4ac47bbb13a17a3cc6196dca0

  • SSDEEP

    6144:sjpwtx+tsv4Dugk9rkSwdq2a8o86P3X7P9Foikq:ou+tsQDugS7w03v3X7P9FoiH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55d786b7846377eccfbc80ffd46d3945.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          c1234806b0cddcb1b743834a68138a6c

          SHA1

          0561d8d5f0d957880929187f39e21d655fc401fc

          SHA256

          f7f52afe2ddfe4b95e29a931b083b3354716a4861321bb5a04c36b402adfd489

          SHA512

          c1d2de2ea4815f0912fd7532120b7f43892003067afb418eb3705e8e3cbd151a754714ad0ad8f99b54528f9d2dad4c663e842db7c543b22c03aad2766dbb8270

          Download Submit