Overview

overview

3

Static

static

3

8f9a8105a3...4c.pdf

windows7-x64

1

8f9a8105a3...4c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/02/2024, 16:18

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8f9a8105a3981058ef63017d63c5cb4c.pdf

  • Size

    89KB

  • MD5

    8f9a8105a3981058ef63017d63c5cb4c

  • SHA1

    d9f6b87f4a21426ba0648ded20f46dd52d1f5364

  • SHA256

    80521c3a4e87cad5b2d9e53f743a6a0e8cb2eca1fb2a7a3d2adf98b1e79e7438

  • SHA512

    0cf91331a36cfbe2642e04d9a12df4571f5f4cdd0191dee047680aee6dfc1e20d1ce4d5ff2454cb7a9e385ea3bb9b04ff23246ab7baee33539f05b47f2fc3b0f

  • SSDEEP

    1536:qVRZOds/QO48Nhb90qvFjUm1CMU3SKRvfP4BWh3y324TbCyIMtWXt95WXpO/Gi13:uydsPT1x/1C1CIvX4soTbCzMuz/z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8f9a8105a3981058ef63017d63c5cb4c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    88de69c163182419753be33255a5c570

    SHA1

    f9e49c3f01dafe68616b220ece8dfdf4e302d347

    SHA256

    1b99daf0543c6ab3c52367548cec594f42a238dcb73ada065e6e3b7456becf83

    SHA512

    d73fc62c343a5fa5529a4e336435d444f33a33aa29653a93bc0797849d719a08567e97bd01e238004931d68f31042050bde52706ce623018c7c1f62412bb09f4

    Download Submit