Overview

overview

3

Static

static

3

70b6467616...fb.pdf

windows7-x64

1

70b6467616...fb.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 22:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    70b6467616da94a69b5ec4df5e0a85fb.pdf

  • Size

    89KB

  • MD5

    70b6467616da94a69b5ec4df5e0a85fb

  • SHA1

    6c8dde7a83b3150b0b3a53f2dd64956c1b9fc124

  • SHA256

    8b31052494063d0596248035228ae1c0b7d8e8941c8c9997fff11ce66d656520

  • SHA512

    605ba85d5e5983c71d815a51260bfb5ed86f4e91e5df6661c592830831dc0e12787613a104701b58f8768293f84c6dba09837590c6441031da8cc478907b0c13

  • SSDEEP

    1536:1D5PIQYmjAWIcNLFOWE4Nnza+woQ4aTT7Z0jwaWypOlWWxM/EIOcGMr6JV:XIQYqpLFRzlNRyH8ElDWE5cTc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70b6467616da94a69b5ec4df5e0a85fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5078ee10ea6c95ef912b7046429861c2

    SHA1

    3e6bfb150e5eabb32ea3dd1ab492bbc9f88e94ca

    SHA256

    de162447a0a41bee7d4be7eff12796f162f489d9738cd915369d1acb1cecc08d

    SHA512

    ed0023250f88d07798ed85e5d9d4dce470db0f530c66b9b70e4bb239b5e77e5e51b9eb350f5c483d7c2b1cc05d06c8d5a5f8ee8a1219180dec8d79e5019445a7

    Download Submit