Overview

overview

3

Static

static

3

599e739cf3...95.pdf

windows7-x64

1

599e739cf3...95.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/01/2024, 22:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    599e739cf3124f075acbb330322aeb95.pdf

  • Size

    36KB

  • MD5

    599e739cf3124f075acbb330322aeb95

  • SHA1

    0813a6913d764310a151a986a89dc17330bda1a3

  • SHA256

    ece45dad6f7f033ee0055651eab8d95887bdcac1e884f4f3a34d1467f3637c66

  • SHA512

    2f0a933e725af1379e14bf6535b9af7a0003559e1347d8385992bc2a3713c0781a3201009a15a03c0e57256616991f1b72c86a715caeb299e76e0d1ea005e3c2

  • SSDEEP

    768:vqPH9r/Rc4FG4PQZlpQKN/09HUJjbrrA8CKSXwGg6IWQhIVf/2:vs9D0lpQKZ3PQxZGIVf/2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\599e739cf3124f075acbb330322aeb95.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    50aa2451917dcfcb835f4fdbf8eeff43

    SHA1

    66a357853af6198594bddb9beefcb40e4ec981eb

    SHA256

    aa0bb08ae1fb1c95608c40ea607067dd7d027f68009e19774d2689fe06be92b1

    SHA512

    c98388ce50899e8c1e4f49d7901307f3acfe08c4d6bc9685982169acb71c25ce200830a8cfbf7580921f0493cb2cdf8fde802d8be47244654092f710eb038a27

    Download Submit