Overview

overview

3

Static

static

3

c6a8c2622a...84.pdf

windows7-x64

1

c6a8c2622a...84.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/03/2024, 19:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c6a8c2622a8dd2436dc6c99f74700d84.pdf

  • Size

    75KB

  • MD5

    c6a8c2622a8dd2436dc6c99f74700d84

  • SHA1

    2e962b2c4166831bd93def63ee350d3af92a966f

  • SHA256

    1d51286c6940888a7dcc9c52446f02ff07bf2fb11556694220063388d143b575

  • SHA512

    c0d8072cef323ca7e382daa5a7267dc48043745b23729c4bcb3905f01eba01b429223b34e20b5950127e98dc6838aa43f2c65d401348ea9bc561af174ff33cb7

  • SSDEEP

    1536:UVK8v6qqbtPDqUkvgEXCgIR9STHOr4WOpOwrKWVl7Ff+wX5Z:7RbJTzEXCgIRV1wr1Fl7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c6a8c2622a8dd2436dc6c99f74700d84.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    71e9c451cd1bb602105f8398ab4fa005

    SHA1

    1af509a155b384c1cd49dafc2491b41065513c65

    SHA256

    a9053033a35758b208c3431fc0948b43c11e65cdfce91b9f868c0cec2723b33b

    SHA512

    d7204cb36183092d8f1ec66d871ff7a72228e70c5f5162df953f83ecfed594539c47cf2a9e5819e5084715de36c3f2257055c4b13fdcb8cec755a7f68a2daba6

    Download Submit