Overview

overview

3

Static

static

3

ce20ec613a...4b.pdf

windows7-x64

1

ce20ec613a...4b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16-03-2024 13:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ce20ec613acc955aeab11cf0f00e8c4b.pdf

  • Size

    35KB

  • MD5

    ce20ec613acc955aeab11cf0f00e8c4b

  • SHA1

    f9013ebf715e618241cbf61173f5d64f9f283492

  • SHA256

    987a66ffb9da39361c2939299c7d42aa77ce321e8815cc29bb2023c07de01ea2

  • SHA512

    4571125539369089f60955e96bb69ce19490ddebd409372c98958e8c703657f91d8e03b1afd90b5dfecd95dfc4da1bbb3d1b1b92511179d820cf84ea9a476964

  • SSDEEP

    768:HhvuQO2PlJJWVdt+KYnIML3Q0N2AqaXHKd741tNXo7Q4D:BlO2x6T+FIf0YAq0Kd81jXo7Q4D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ce20ec613acc955aeab11cf0f00e8c4b.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e89411daedacdc8506ccf7996c976b2a

    SHA1

    113c0d346774acf7f3ce3017415bd0b0e3e3eca0

    SHA256

    787d9068aec16f3720776268c2990a5b0f33857eea60e3b9f0ec8f901194f525

    SHA512

    9817255bb6fa29f5e8d6b2f9b8275ae91f5894b7ee6064fd48fab98522566f4ddf95d58df1849eedff7963da94c5ac3d1ba672ee475f7f04eb5975c46e7f0a10

    Download Submit