Overview

overview

6

Static

static

6

ad1068eca2...fb.pdf

windows7-x64

1

ad1068eca2...fb.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    25-03-2024 13:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ad1068eca24e47db153d526b2d1d96e557e8ec9f95f94fac11962d3b672703fb.pdf

  • Size

    134KB

  • MD5

    23251cc385c146541b5ba23b3f5b9041

  • SHA1

    c14816fd47f4a61ba2e4476088fec6a5891364b4

  • SHA256

    ad1068eca24e47db153d526b2d1d96e557e8ec9f95f94fac11962d3b672703fb

  • SHA512

    a4bff89b2c2db8fcc8e6fe659a0393f5f6549ef1aca795ff1ae8b5441fc67bd298eb420f6d91b7ec3e0c2485aff7c2e1179ab6e6a89c7b69e6ec5737b18c68d6

  • SSDEEP

    3072:/t9e/9L6r86g+k21fGEkOs14fr3WIM0XlHJRUcWX6Nh:/jm2oz+NVGEkOs1opflDGKNh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ad1068eca24e47db153d526b2d1d96e557e8ec9f95f94fac11962d3b672703fb.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c34d58d7ca1faf265baad2c6defdd9f5

    SHA1

    f1f1602995cca2f1dd7d6dc9dfc17926efde81a4

    SHA256

    474f4d0a47f3774965bcf8e8d2006bdac32ed7bb5428f584d687d11422cc5db5

    SHA512

    3c2d7c2bb5350cc390c9cf0e8f7da14a2d18f7cecab1e9d8acd1160289b96eff4e6e0499036b9415c7b74b464ce58b73d68a43dd54bcb9c6b5409e96e952c168

    Download Submit