Overview

overview

3

Static

static

3

568df05c40...30.pdf

windows7-x64

1

568df05c40...30.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 13:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    568df05c400e5240f4539705a220c030.pdf

  • Size

    93KB

  • MD5

    568df05c400e5240f4539705a220c030

  • SHA1

    ccffaa4f1aa012d6a47061816092bb48813c6a1d

  • SHA256

    7e04ddf8230cdd81ad9389e4ae6c7aa06e3652841358a00f0e752f3d4cb5ad21

  • SHA512

    82584536f7e89bebef4cf8f9890cca3b1db735ede90a52634477c5fe67071b9d91cf49af0e3b20310ffd5ff6d9f4fd2ea326144fce94f0d663d23d6c739f78ca

  • SSDEEP

    1536:cftaq3zB3bjBLFom5E9ZZDCFg6sPKcqZPnqWTgd1gWepOZwof:WaqDBLdWVZDCS6tcqZfe3tZD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\568df05c400e5240f4539705a220c030.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    afc92226bf4f6df2f3448e21ad0169be

    SHA1

    058df0146cc804ff36f955b5aa9993b54917b437

    SHA256

    8c5e35e13d6e07a01c1b8bf92d70f3ba90408250494b243fa0dd38ea99d43716

    SHA512

    6185405bb6a748e3f8e03ebecb12bbc4997ca765b14cce94f472814d0835c523840a456f9b914183eb0e87f0bdc89c7921de2f268946f00846a030eb7a495961

    Download Submit