Overview

overview

3

Static

static

3

d64e628d4e...52.pdf

windows7-x64

1

d64e628d4e...52.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-03-2024 14:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d64e628d4ed4e7d5fb8856d2800fc652.pdf

  • Size

    78KB

  • MD5

    d64e628d4ed4e7d5fb8856d2800fc652

  • SHA1

    f8fbc61ea3d1c98c3a37aa4dadfa5fa5520ec123

  • SHA256

    31cdddf4571e8dbb54a27679685e0ec09cf0f8036bba8fc52d5e37aefd73da84

  • SHA512

    598478a416c5cff2750ca67c306fe67ed3613d016dcd3e64fa44dc08f0149179ffb47a1ec68947650ae4538e87141143eb78997498fdd5a819d992f086ce2d68

  • SSDEEP

    1536:NATNqVWgjzZNpKhyySrp63RkUbeQmc9CqMlDiCHsebKWmpO+4IWR8Xby+Q9TSDd:OBHgjzsY83ilWQsu+4IyF56

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d64e628d4ed4e7d5fb8856d2800fc652.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a3c5a4d951fd2402761d56d353bf4eda

    SHA1

    d00eb45bd40f2ea27cf323ff49d0e8dc54661d8e

    SHA256

    60d55a5125df9ea8e84c31825859b7c4858e6fbc3c6b375e608161af4e1182b1

    SHA512

    70614d8aa46f3a54bc0f0064623e86fd442ade4e8efa83658d352e4ed685321cb19d9f355e07d2aeab970741a79d56f1f2a1be5af8d98b6eb766636678047eee

    Download Submit