Overview

overview

3

Static

static

3

70dd733623...93.pdf

windows7-x64

1

70dd733623...93.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 23:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    70dd733623db58d998d02497022f6f93.pdf

  • Size

    44KB

  • MD5

    70dd733623db58d998d02497022f6f93

  • SHA1

    104b1c0bf60b49c366570f2028498c25305f796c

  • SHA256

    2f10e70a751ddf7a24ba5cc8b37d8601bf12572d6de6828bc9294bbe8ce8cda0

  • SHA512

    91bc07974768b1274d53587d9db7ac50bd09ed5496429708594b546abf37ce2f4fb855e50482768b2d7aec31524898cbfb7cfab8a13826849fefb6b1173d2f84

  • SSDEEP

    768:lJpTRPNbplcSYoAyjuzqx8+jWqcjA8Z27LzUzrLTakWbb82NnKqZKS:lJ5jVt3xRgAs27L6rXaBn8LqAS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70dd733623db58d998d02497022f6f93.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c5288a17c7c3c97fc99ff7199700f072

    SHA1

    b48fc840cd3d98d50c339963c69da0371e6edd00

    SHA256

    379ea8f5349a7d9347dbe7182bf0c61bdeac881f93d8f5303cc9b637c1b573de

    SHA512

    dd34fbd57dec5c33aefe45bcd4789f62c65dee3d2264cc8036c57906cedc985642c20e99843c5535c3778cfd3b299bd108c267b8fb6c218855ab00128c38d458

    Download Submit