Overview

overview

3

Static

static

3

5a53774ff2...98.pdf

windows7-x64

1

5a53774ff2...98.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    14/01/2024, 04:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5a53774ff2b5f04b7e81253f845f7298.pdf

  • Size

    101KB

  • MD5

    5a53774ff2b5f04b7e81253f845f7298

  • SHA1

    76c13d14f581ac16553b3c6d06d94475019be821

  • SHA256

    29f2663ebfc7fe77a8091f9d888a32e44f18b6a7bc5bd0906f7bbeb101b90aa4

  • SHA512

    f945ac93af0339595da8ca189ac2ffb9139255144e4705c397e198d5050e1e57a1ce02ec48467c30c451e89fe60f92213fb11fa9cdfecf2fe3230e73aca17df0

  • SSDEEP

    1536:nZ37VG+nUfx+HoxCl4mNG25Q72kA9QECllzj0xDdLiyyK4GpbW2Hm/WfZhrebWOd:p7VQ5E/Jflk7E8h0VZjyKjpxRh64wrOE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a53774ff2b5f04b7e81253f845f7298.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3c1b9355eb35848c555e9378cb2207ce

    SHA1

    3c9bee9dd704d3b272dd698a3de39ad68e7820ab

    SHA256

    8dba0781c11b3346d72413977aab8efb987d04052b10524b4ff078f1314b261b

    SHA512

    f15ab3e7a7e1630cdc6ce24a79943ee473595a5fa5da394d18994fe346809b00ae983c6cf6e4b33dd9cee1d03cf71c9dc62eb113e7856db671fcf5a7a7c36632

    Download Submit