Overview

overview

3

Static

static

3

65637a857f...a2.pdf

windows7-x64

1

65637a857f...a2.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 12:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    65637a857fb61f89298f365fba4170a2.pdf

  • Size

    48KB

  • MD5

    65637a857fb61f89298f365fba4170a2

  • SHA1

    7e67078844598162ab07a93a0f9c1c974fc9a4d4

  • SHA256

    20b3c07cda861a1e7f2fb91f2311afe15615ce36399e192d47ed26a923dfcc7e

  • SHA512

    e2d405f1a7270864925533a024e786d45cb002753433cd87642baacf184d114335a64f9be1903154c5e172f61bc09c3dc74ef03e9e045e6a9d700a1ebc28c08b

  • SSDEEP

    768:1bmvbjILL4yPgNVNfiT3k5GM/LoVo6RIgQgfPv4+kDZiZOC52R:1boUP4yI/UWGSLoR/Qg/4BJR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65637a857fb61f89298f365fba4170a2.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c5bddfb52f8271e8892ee5d6058fcf1e

    SHA1

    97c44d37af8808e4935d2eb9d541b4404424b70c

    SHA256

    849ccf67b68bf20380ababb57de1670ec030550e1d71f232c703783997d76a0d

    SHA512

    ede2a11409de35fddb6f364ae2efafbc88af921d612c6c03ec7c75649744818afed0a9bbce97f1af907980394b5e61408abe85715548814c412eb1badf955c6a

    Download Submit