Overview

overview

3

Static

static

3

708d9967fb...a6.pdf

windows7-x64

1

708d9967fb...a6.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    23/01/2024, 21:02

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    708d9967fbfbaee22e1866a70554eaa6.pdf

  • Size

    96KB

  • MD5

    708d9967fbfbaee22e1866a70554eaa6

  • SHA1

    35b6944d875e160bbaccba2719c8ba7c6df8724c

  • SHA256

    57b32125d2a68f55eb1be7e3eaba0d1ba542792123bb519ca8c59c885f529591

  • SHA512

    a656d09f35ee34be6dd181688ef668125aef7e03b7dfb98f6390dfc43e2c79984218806d51fc13fb2926f82d223b1433033d725dee767173e51ea378e2fb1790

  • SSDEEP

    3072:GQR4TXGvPcybISLbB8jC57CPSlhIyzy1ebNthsHwZXwh:GVXGXV9LbB8GZ5sOw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\708d9967fbfbaee22e1866a70554eaa6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2376

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          f276bc29ba778acec4a8f04f5be166f9

          SHA1

          6002e4ec3e4531b9f0a4cbe2db6e4e91def3b419

          SHA256

          ef6a01e0eb6f752b9ae4c5a00c2127aa9b6a2218100f53ed972d01846502ce9a

          SHA512

          29ace5488d2e43d63db4e6d49ff3ea4f591dc87e1dd68ad069b59b06ea77a94cbf42fd4e55a3bfb3e326569d003375f80d20016469e09f44fd5ddc26e0fcbf1b

          Download Submit