Overview

overview

3

Static

static

3

685a7c85ca...86.pdf

windows7-x64

1

685a7c85ca...86.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/01/2024, 18:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    685a7c85cae483f30db3b2d005864e86.pdf

  • Size

    86KB

  • MD5

    685a7c85cae483f30db3b2d005864e86

  • SHA1

    296afbe0a287449d82b7436169296a2149ca1473

  • SHA256

    66084c921cac438d1098ce9c9721649a3098c38ff749a2a6c417267429f48528

  • SHA512

    00ab098b5f3668a6ab9ebb19eeed24c64c78292cc1fd3bb070f94f2c0ef7b0ebaedc592b0b384244b8ff5423f13bb3623860da16abea2b7c8f148dbaeebc99b3

  • SSDEEP

    1536:geWm+rtiEy2ZZgrLoM+46x/VHUpdyWtFrW4WE6YvYRTEWOpOwrgrZaq+LOny:ErtHyGZgXV+46V6dTPH6DThwrgroTL/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\685a7c85cae483f30db3b2d005864e86.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    120d757b8edc21d2e5b158abb2e6aa2a

    SHA1

    94e083555b034e97d6a923c0b06318b89efd0e6e

    SHA256

    41fec0bb1fbb8591061c0fe9bd33be6ce4b9233ecc07f3388b454a2096c586e2

    SHA512

    3af10775de725355db708c709ebdbeeec84bfd4f53f1cc01ca28d25d98c40e28500526419d390572e469e6ea6368ed22b983c6abd7005995c4ade7f059c45965

    Download Submit