Overview

overview

3

Static

static

3

d3cccea0a4...cc.pdf

windows7-x64

1

d3cccea0a4...cc.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/03/2024, 15:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d3cccea0a42b1b898f863ea4f54ab7cc.pdf

  • Size

    77KB

  • MD5

    d3cccea0a42b1b898f863ea4f54ab7cc

  • SHA1

    7f486435fe989f60612b37cd5e7531952d90f4e4

  • SHA256

    e49dc86e61f35feca1679d38489124fb91c0bb77653500581a8ad568ffa69903

  • SHA512

    b0d7003374402b4c01306d3afa253038af40f076e03b3226ea7cc77abc261e3647310e174377ccfcd5609cb80870b52497a4f49220c666f45da49cabdedeb1bb

  • SSDEEP

    1536:bzBBAs+wCcEJcFydJegt919XSmap12gbC43XWnc9bL6/GWxApOGkgYybaMb:JBAtwChcAJR919Xh+2+CEoT3GkgYk9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3cccea0a42b1b898f863ea4f54ab7cc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    37f5337cb155ce88347db08fe0cfc872

    SHA1

    739d4997b5a3183987ff13fa56072cc9b5473b27

    SHA256

    81f203be8a1d9d3efe29692599b3b454e83eec9d1867bc8844b54d1c5543a9ef

    SHA512

    7e2649e5dedbd88cccf1aa156440f547bb8706f1877762daf8958d26989d190f7d3798605020b727f0a27a53e6b4aafdb3295010e6d3af4d50e8b60fe0c70183

    Download Submit