Overview

overview

3

Static

static

3

5b2f8ad929...bb.pdf

windows7-x64

1

5b2f8ad929...bb.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14-01-2024 12:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b2f8ad92986805037a8226e3fea7fbb.pdf

  • Size

    59KB

  • MD5

    5b2f8ad92986805037a8226e3fea7fbb

  • SHA1

    e672da51fb12603bc6cea50ed948dcef75864bfe

  • SHA256

    5bde2ac6685cca1ba5b1fb74f589cf7cb8be918dc6d1922b1e75dd28f55163ec

  • SHA512

    e1fa5c34c4dc7c6d079a301d294fbc52554db5a9a99ad278f750ce8bdaca2a1608c2d16f529a88c340bc92a5e926ee769ba06522107e23876b0bd0d26259d195

  • SSDEEP

    768:4IjghcwX8XkSDTSYwEaLfIkcuU10XX2czhhH0ZgUldMP+LxZybZ20eYVDmliawOM:4L3FEaLfIZuU1zehlM9OLSlidRlV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b2f8ad92986805037a8226e3fea7fbb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    41ee5b4538ff99583c3ed18d26223ce2

    SHA1

    becae0a977ab5486b61e70a0ec533b58b6c9e6f0

    SHA256

    818c193f5cb7b77e6e642b68e6ede241dc25a21f1910019a623ebf9d23ce853a

    SHA512

    21896494f341ae6a3e4b116aba47eb4189347b661986dc360606c46b71440c1c31b84656977e638cdcbf4987ff609e360f7da04e4c05df744be6bf5e8622c754

    Download Submit