Overview

overview

3

Static

static

3

c1bc211de7...3f.pdf

windows7-x64

1

c1bc211de7...3f.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 22:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c1bc211de792019bd7a1f064e0c7383f.pdf

  • Size

    66KB

  • MD5

    c1bc211de792019bd7a1f064e0c7383f

  • SHA1

    e776732dbe664a422b593f61fa593219a33cbe37

  • SHA256

    ba3685d1a8114ad175bca7a2f53d79e4db72d59069cc28ab0b28c95a817fda64

  • SHA512

    6b78ca7b60ea028a2951957bbc864ece9b8fd37496dbc58e1dd7dfe6f91ec3f5f0eff500612154f220f98c4d5c8353a61d0dfeac3b208fe64741c972dac7fd52

  • SSDEEP

    1536:NjqeGCqszqxYnyfBEjI4OF8BFDciuqHozt5dJ9bO8GLaL0QN:3r4YyfBEU4Oo6tKoztJ5O8GmL1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1bc211de792019bd7a1f064e0c7383f.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    98addbbf09a2afa875af52db395f7a79

    SHA1

    317eddbd6e2ebaf723b103bdda5481e3825c43be

    SHA256

    468ab74083c2bdca37ef295378938935219ecf2730bd75343c6f668d9911c60f

    SHA512

    91f919e4a784cb237cd283c51b8ad6ffd1568cd481f95722673c8e784f2808a50b32c85c368453c556045d1485f9e9437fbf1f058af3ea0c39b526ecebedf146

    Download Submit