Overview

overview

3

Static

static

3

9a1bdd0323...f3.pdf

windows7-x64

1

9a1bdd0323...f3.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-02-2024 22:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9a1bdd0323d48c19d20b43476ad632f3.pdf

  • Size

    97KB

  • MD5

    9a1bdd0323d48c19d20b43476ad632f3

  • SHA1

    797484a8f1f2413a91fd1dfd79ace1903e806b5b

  • SHA256

    d3cdd88ca158eac572cc979414789e07493c7f4da7df477764f05111f7ff2a80

  • SHA512

    fba7c24c8d6e8bb51053f1b5f1551735faf13a27ab721fba069865149a06df5077babe0804398aab140e4dd517f01a8c862fdeaf28d6d9e12a6480f9fa979843

  • SSDEEP

    1536:rFZFwxSMIxYDaWGqmvpLuvi0LmViDAhHmo7GS3zD0KplUkc5SsM4jkr:Zkx7oYDbFEJMLaAAh77GMzD0YUHtM4I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a1bdd0323d48c19d20b43476ad632f3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    79f96a650760157e904d1298e6edbd87

    SHA1

    07b485ffa4f69dd6108716fffc77745a58492b07

    SHA256

    cea34da0d09eee4c8c7bf568e95d2a004764a58d4924885c7139d96070e25e31

    SHA512

    041cf9163880f1ea6f5b9a975e8a87f566d16f8c61540b4485e417555f56412e27e8932d10db4bdb44457cf21c14da08a10ef777c3138452da270b6b8e8c9d32

    Download Submit