Overview

overview

3

Static

static

3

c981615ce0...28.pdf

windows7-x64

1

c981615ce0...28.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/03/2024, 20:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c981615ce051d73adb02ff7c59397728.pdf

  • Size

    85KB

  • MD5

    c981615ce051d73adb02ff7c59397728

  • SHA1

    205bc8ff1b76fb63f2a481438bf30c716faf52a0

  • SHA256

    1e7d6a8e6740b20893a4a54eb4bdc44eeab5727a3620328359c6e95c3eddc84e

  • SHA512

    68b1b7f0ac935edfe5684d3edc25f68baaec25d0c3b24e62991cef9273a30d66ad3f21391bfed30b49e5714d7593614c8626d50481318e8863426ddfe4501ae9

  • SSDEEP

    1536:ScOEOSNHEhsajqJNNK29H2xbcanMfS9lgvUi+/9+Fk60gGC1jp8S+a4TWXdAUbZg:AEneLjqXNsxbcsuScUb/sFvRpPv4qnFg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c981615ce051d73adb02ff7c59397728.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5ddb095b59dac9d2f5902344c505262c

    SHA1

    4f306dadc09dbff4890002def0852525302fe303

    SHA256

    d16119a86f26dfbac9f41ed67ab8ac05c62fc01a2cd36d32c581de72473b814c

    SHA512

    390fa5a35f8cc83d0dbdbd695002e5114e0ce0f02b47f5bfd0c5d7468364d62f29902db9eee3b02fcc660c013587aa809b853cab641972033fe7f25e13f4f014

    Download Submit