Overview

overview

1

Static

static

1

x3N94cGEzYpQrbd5.pdf

windows7-x64

1

x3N94cGEzYpQrbd5.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    150s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    14/02/2024, 17:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    x3N94cGEzYpQrbd5.pdf

  • Size

    676KB

  • MD5

    b40458fccfca263ac5b42daf86fbc402

  • SHA1

    5a66dcc110f0a03b09474ec1346559d904bdf7aa

  • SHA256

    d3f02ecb0f029f1533247e2cffe60ad963ce50cf7f211328a5c85e1106b288fb

  • SHA512

    a844108874d3348c8835396e55642e1db153dc73f2164b31e89133e7ea9736070ea645ea25bce2429d3e10ca8ecda5110cb92a39d3cf9cac4f89936466b17944

  • SSDEEP

    12288:jOWFfX+nFMAZL2kffxTzFuvAOWG2uBsiuehr6j7PNvPp8uqI2vgOakVAhgDSx7E3:/C32kyvAG7hr+7PNvP6uqRgQVsQ8hnI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\x3N94cGEzYpQrbd5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1568

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          2305d630cae87d64c9d937de36a9c7bb

          SHA1

          50c7bedd2bc3c2e360c44cc39bf5cc22d7870ba4

          SHA256

          ae2f453202546501a3fce9faa1401cb5b3201a22e60b8d1846848e5943edfed2

          SHA512

          187b39e06c66b652ead58269d852b8503ce56edac95fce1bf2171e3903bab95595506893eaa8f6bd58ea01d2e5f97edc7ec8079946327bec9fac869908a6b2cb

          Download Submit

        • memory/1568-0-0x0000000002FE0000-0x0000000003056000-memory.dmp

          Filesize

          472KB

          Download