Overview

overview

3

Static

static

3

bb3de04907...74.pdf

windows7-x64

1

bb3de04907...74.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/03/2024, 12:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    bb3de04907e219924074666250e8b974.pdf

  • Size

    81KB

  • MD5

    bb3de04907e219924074666250e8b974

  • SHA1

    fabaeac78926f1dd3211c2315212bb1c979fea0b

  • SHA256

    111b232853c752d8266e7aa241757bec0d814d6816b8d1b728ba1587cdb9d771

  • SHA512

    d3901bfd554ebc5b55dd4d6ff065bf8330287930a2d57d3f34a2334ce9cbe38dfaa2076a238ca28fb6922cf13c6ba59d72f73b79096b5b5a4ca3ef19960c9e60

  • SSDEEP

    1536:kTRiKbvUNF4pIKDBgrsLpyLor/WfJwPcX14WSvbp5teXLOEWUpO7gMh4:yFvU4+UurrLor/WfJ2kO5cbOH74

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bb3de04907e219924074666250e8b974.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0bbfcd7f5896398138a5053d47d37ab9

    SHA1

    fe643af0941f524a4c707138134c8b7566dd4859

    SHA256

    45657ff68e2a3013a050c178f5dafafbe2214f958650c95e4c766e6186c04d6e

    SHA512

    e3cc8bbbf037e75fe5f0c3856630a210de6b0c542810f18c7c36b3bac60d4a88117fd8c7c6f5a60a5287ed09e8042153d1e92bf6a416584ac7b3a2b1af21f425

    Download Submit