Overview

overview

3

Static

static

3

5bd43ca65a...0e.pdf

windows7-x64

1

5bd43ca65a...0e.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15/01/2024, 01:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5bd43ca65abe607e914bbb5bfd164c0e.pdf

  • Size

    93KB

  • MD5

    5bd43ca65abe607e914bbb5bfd164c0e

  • SHA1

    e80c6c725f87fe3c3f7485122d6cfc7eb11e8160

  • SHA256

    44260c40da7e7ad11ca2f5a33ff59df7cb12caabd3c1dfb81bd310afdd7a761b

  • SHA512

    b450cbd87a2ba5e76b6769d9296038ccbc611bf8543f71fbff31bc26a3657779f7482d1aadd8a281c64f10d953b7aed61019a00ab410a6200ab712a3734f30ac

  • SSDEEP

    1536:8SbX1+wCHwpihswBAkcbkJrquAWoxtUn1Y/e3WGpOKqdDFCWfnr5ARv2aYhF:NXtCQpzxbkJrhutX/eYKqRFBre2h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bd43ca65abe607e914bbb5bfd164c0e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1c5f41b00601ee6d7101cd9ee469bfa7

    SHA1

    bcc0db57a7b9b2a9583d91793d22e16c06946cdb

    SHA256

    b697438245e8e42834d69394f58df0cd15650e34dafe91fb49b1fc5a711f2c80

    SHA512

    cdbe11d6adcb9039b361ecd469c4e49e0e83f83055e41f5f45178f04c087eff4ab39fe7f73df7bc7f0cd5f0e2c3dae1b5d26c44d8019ec6f42661f64a6d14266

    Download Submit