Overview

overview

3

Static

static

3

980b8db4bd...8a.pdf

windows7-x64

1

980b8db4bd...8a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    13/02/2024, 00:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    980b8db4bdc5cdf3c0673ffd1319538a.pdf

  • Size

    33KB

  • MD5

    980b8db4bdc5cdf3c0673ffd1319538a

  • SHA1

    a99c070f64ee3f1fab8a952196a67e8f62cfff19

  • SHA256

    cd86a739e9f53c170b797aae89be23963f4d5f32feb0f2edf7af4ed006169384

  • SHA512

    a056ae0e75153dc79e02abb7036c68f322b1001acacb161a25932300eec1bf39d6c3fbda8d8626c623007453828888b5f0aca7bd7bca17a921e7234725345277

  • SSDEEP

    768:93NQLa7g3sNOGWXh3U1X+23uJtmYxBWLzHF2xUspetN7d:9GOOG0lUB+2aUfzHFEA7d

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\980b8db4bdc5cdf3c0673ffd1319538a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d142e0aa9ffee9ad9437086e6d7a551c

    SHA1

    ba95335d4fe8cf616cc8b68c5ca2e737f2bdb1df

    SHA256

    255511250affa3c95d3e116825f560bcf29fab5b9a06f2c01329ec725a7ec05a

    SHA512

    519bbd9c1c03ecaa452c9e84ac763954ec71702dafcc1fcfdb0311968ed4a6e01eab16c15658740a988541a16f099ce5ffacc6018411cba0faddd864d4f22fce

    Download Submit