Overview

overview

3

Static

static

3

c1cedb0480...5a.pdf

windows7-x64

1

c1cedb0480...5a.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/03/2024, 22:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c1cedb048067a407371536151c69285a.pdf

  • Size

    179KB

  • MD5

    c1cedb048067a407371536151c69285a

  • SHA1

    ff509c942f40e8faead25a14e691afcca98b7362

  • SHA256

    7eaefe39ea9dd9e87b18c342a5ee6196d28b32defe4b35ac73f75170deddab04

  • SHA512

    e75d98a1c80a1a83d19fcee31b3100bc579d24d9dd6b03dcc38a796fbf80955648407e26e24e0fcfcb026bf9ada6f2d7edb931764cc68162da93520e1cb7c34d

  • SSDEEP

    3072:gqN27DEZo62pZEIMfqjCq9ZhjlWxi45bG3XWkR+F/sDNfSoCu2ZCrNN:gQ8Mx23EIMfWNhWf63GBgNaoJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1cedb048067a407371536151c69285a.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c4611bf6e17b7e3c81e7e2344ac93cdf

    SHA1

    58fa94544ced2e2b16decbbb45b7606b09256e57

    SHA256

    d5466c639d42e9761df913f3f7f7c329c454ee4a8f830d40aa288a06ff257a96

    SHA512

    46db7c28a41ebf4dbad14a75e24cf2c324ea62723279973f0144e320483f0ee95817ec9a3bbbbe621f096e20963742c1faefd51a12faeb29177227df9c496410

    Download Submit