Overview

overview

3

Static

static

3

67584fc79e...4a.pdf

windows7-x64

1

67584fc79e...4a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 10:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67584fc79e979d656200d77e3b256c4a.pdf

  • Size

    88KB

  • MD5

    67584fc79e979d656200d77e3b256c4a

  • SHA1

    e2d986f14f48ec96ee3063f9e1aedf6a8b1c6b84

  • SHA256

    53bf2456a483cc70f7a395e15b63a266e30501b6dcd089131babf039e895416d

  • SHA512

    a1b466f0179281f3bcd9de7588a0bb1d0ba8648bdbe8afc3daafc5021047ddcfc96f0eca37ffda79bc64c9cebe911400532d665c6baa6fdd70c8541454820154

  • SSDEEP

    1536:ks7DpVC5IoCLi+LOBZkZPYLtCqV69r225WOiZf8wPu9WOpOwrRalr5l0s:V1V3o4ihPkZPq5jewWawrRaN5l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67584fc79e979d656200d77e3b256c4a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    937a385155c33171a855d98da2758981

    SHA1

    ad633d99da17a5c4bb52bca5f48156e97d96dd4c

    SHA256

    8208d03d37168f343d589a33a23e7ee8a44458e5d9144e58477f3ef9a9b0cb00

    SHA512

    79dca8f709b01c41a2719cee41fc9fa7abd69e32f336859e4891aedcaba4369d1986087cc1f91f05bb9f85d895696584d6c3a55f755e0fe12dcd51b0d5ebffd5

    Download Submit