Overview

overview

3

Static

static

3

b87ad6d5c8...0c.pdf

windows7-x64

1

b87ad6d5c8...0c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 10:12

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b87ad6d5c813dd83ec17d98e3bb2960c.pdf

  • Size

    91KB

  • MD5

    b87ad6d5c813dd83ec17d98e3bb2960c

  • SHA1

    25cba52277c799cd0588208e442d94a62ccc6ac1

  • SHA256

    75eaeaf171d592d1af7333537ed7a3481bf14b2793b8edb4e5cf47ff04b17e86

  • SHA512

    3525b4a187638e2702c485015c88a074e509c41a2508c23899aded3b6c9fdcbdc624d4cbba3d6a2a4bdfd32d87c8eeb60d6d6c3dfc713fa853e8603844a3f65d

  • SSDEEP

    1536:vTnIV/IfowNU7yhsAPuG5bki0p9SYqMXPWv9WgW1o08fFRve4WUpO7H+x:DIV/6UAPuG/Y89WJOveb7I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b87ad6d5c813dd83ec17d98e3bb2960c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          d06d81392d27e4e0c9c461f8cb102740

          SHA1

          7a02c07a4ff621c9de35d9bccf18e98b3e9636e1

          SHA256

          bc5cd0399b2150d13544a60d3545ff14cc7e8ebc377f4fd524285f755dde36f5

          SHA512

          62c88e2d6eddf2fde0a7465a536b0320097f7b6a44d67515d7df387b68fbab7e58c025a4bf427ab8b9e25623a60a7bcc1a9a80b313609896b47120b451579fc1

          Download Submit