Overview

overview

3

Static

static

3

664ca8db75...2a.pdf

windows7-x64

1

664ca8db75...2a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    18-01-2024 23:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    664ca8db75d98b8fa536055dae1d3f2a.pdf

  • Size

    34KB

  • MD5

    664ca8db75d98b8fa536055dae1d3f2a

  • SHA1

    6c9d431ec29eb86fa4a027aa522074fcc7bb9af4

  • SHA256

    cbd2e221bbeb1199f0c144124c4d54be0bfc8c64d1d59ac5298744a77db14a77

  • SHA512

    244089c02d78b0aa3035a4033e90f3592037a5f059e0b4a42d8b0b77c7a38dd03b87f40e872bda7ddc5e0ab16bbf1be2ffafd1438fcc20a3d426ff4dff217226

  • SSDEEP

    768:T7uy4IBvKusR6HhsIBLZLSNTZaklSRAfllyfQGj2ENs:TiPIBCmp8ZakARA6f1vNs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\664ca8db75d98b8fa536055dae1d3f2a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f5c286f517cd1f9b0e077d75f411c93f

    SHA1

    2dd4ded6c84722ca7338a1c388aac10b4b02cd9e

    SHA256

    6eabb18df9efdba1aaf3b82d906e3acb61f19a67d926aa66326915eab2fad267

    SHA512

    1b5a46e109d6cfcb2211dfed7fcc9006cc1996a8b9783ae6de534eaadc483dcd85ee9ce65755f44d063f30f38614c28e8d90cc4bcf53caf2c4b71fad5fba71a7

    Download Submit