Overview

overview

3

Static

static

3

e11c50ef7a...ee.pdf

windows7-x64

1

e11c50ef7a...ee.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 07:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e11c50ef7ab7d9d5d7507008d261a9ee.pdf

  • Size

    84KB

  • MD5

    e11c50ef7ab7d9d5d7507008d261a9ee

  • SHA1

    b524541d0b31f9f692409eb56cbbf90e35f96855

  • SHA256

    96e953fced52ca628d22c1092a08ab0847e5b8da18747b803fd9562dd09667bc

  • SHA512

    5f8be13667b5772eab0c7e5c59fdce173f59e7b836dec2ab82e159cd3a06e052d658c6898f99d270db14d33817fbfb137937110bea7aa9e3d07995e6f050c092

  • SSDEEP

    1536:ZQIbAnJ8z1ozACtqdT2w3QLYtuokSFv1bnroXsqIKg7WHpOvPRNHqr2WBEgLNx1j:OIbAniz1ozACU6LDIrc4Jv2r8ANDj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e11c50ef7ab7d9d5d7507008d261a9ee.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2ebffc7d2891338a35cd48751a5d94bc

    SHA1

    983d0500455405a363e7fca5ff0f198b11f9878c

    SHA256

    d007730089333ac0a2a6969ba3b6dae210a84ff41e3c10e1076ddadac72db5d1

    SHA512

    79b0208aa04be63abd0b81ba22a59ec5814d45de7078480ef93e297e5aed75fccb0cc69c04ef5cb25c5fe16036cb45327c9fec20795e60dffdede2bc88a10c61

    Download Submit