Overview

overview

3

Static

static

3

56d84f396f...69.pdf

windows7-x64

1

56d84f396f...69.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12-01-2024 15:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    56d84f396fe93e50e2fc9c45605d4469.pdf

  • Size

    42KB

  • MD5

    56d84f396fe93e50e2fc9c45605d4469

  • SHA1

    78d933feb1e1f5ce6184c4f32cfafed7b37a4a5d

  • SHA256

    bcc19a9b21b09512474dc65a52fc991aa4f1a93a3eb21dbf50105137e9d8714a

  • SHA512

    ed981fafa88637c0e9308fb5c8aa398420e5d0371af5596005a1dbfe9495dae23e46ac66debca881f750f809aec2d237a3568fcac9c27b4ac9b8276c1470cb54

  • SSDEEP

    768:Xjo3aCg8kHb4DYmUXUWU71CFWzATmwwAlgqxZ0bhc+4D6OZoB2byQc:ToqU+0FxC6tSlgKZI2+4D6dBjQc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56d84f396fe93e50e2fc9c45605d4469.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5e09e3d6914f364077ddbc6dca4d80de

    SHA1

    9cdd1d3c7771671cf43e7d700df6760fa0769df1

    SHA256

    453c7472699e993a4659ae8f071bd9169af3229674fa46c4f8ab3c0966d600cf

    SHA512

    a76defcb7f1d5f1817dd7635bf8a79bafb466f5a52f146f113ecf6dfc86b71b0fde068618f865d73e76da4e484a5f10cade2758786fa6ea1526c01689537f50e

    Download Submit