Overview

overview

3

Static

static

3

a469d750c6...26.pdf

windows7-x64

1

a469d750c6...26.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/02/2024, 17:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a469d750c6f7941d010387f931ee9726.pdf

  • Size

    77KB

  • MD5

    a469d750c6f7941d010387f931ee9726

  • SHA1

    cd3b781253ce537dc8a95773228ce5834367ce9a

  • SHA256

    408969c89533420d4306c5fc1e7e6db24c0db5ffe7af2fb990c0d93b73e288e8

  • SHA512

    efa8fb7dbbc2462ba95dc34472e229229799c05fee971c4daf291fe27e8300d52652e083fb3d6a39a8c17751fd54013752738b6f5ac18d52e986311703920af5

  • SSDEEP

    1536:OoC8mRvmE7tE7rDUOeK4RdxadhLxUfWqZnYMJh8PIKyCIjxs91qDVM:VOvK7vUFadlxIUi53jE1q2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a469d750c6f7941d010387f931ee9726.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a5488ec8aec0ddcec9b89d48949a9b3f

    SHA1

    d94966b26d4a4d6e10734defe8af2c5dbde7a335

    SHA256

    dd5a866b4097030df093eef7a0891f944bcd73dace969a9190d75128834a3db2

    SHA512

    0b40c823c82f3809629d23ebfc91b09a23fd632e4cfabb03d952376e174f26132b7abbe1e117b2e26eae7842d9095b3d0790ec8f0e38930703de6b48a6959b0c

    Download Submit