Overview

overview

3

Static

static

3

e1d85456e3...a3.pdf

windows7-x64

1

e1d85456e3...a3.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-03-2024 14:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e1d85456e3238f6684abfa99018543a3.pdf

  • Size

    89KB

  • MD5

    e1d85456e3238f6684abfa99018543a3

  • SHA1

    b000fd2eca54b65057ca49238b9430bebd34dac3

  • SHA256

    cd6b40d613fde4573035870336585cbab268e696c501a61996501c8efc198208

  • SHA512

    89429ca0823883d6d7f6da4277ca1b1f906af13e4814057fb4075e40b08b9f8e75b7f742595a6bca2006f12df7cebd15c207599076781d0e8bf35639bec39d2b

  • SSDEEP

    1536:OfjoaiHVd2UFcFOWjLbejcA6OH4uFf+rLQ/Cu0OwBbhW6pOu26WmbjEYQBqOnb1F:Mo1db+zjLbwETwfmQ/CYMbCu2QjEYQBn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e1d85456e3238f6684abfa99018543a3.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    378fe179dd8ef817cd719b4c4855f465

    SHA1

    90bae0d17ab79fcc8a189057f05a9177ca556a06

    SHA256

    ca0a7e601f3efb79a60b85c451614b4cf032abec4efc525605e6cde0ecc3c593

    SHA512

    608139458d3e920c3234247fa266e1c61fa1b85b7cd3519ee38fb273f6bdcf74586bf9a2ed9b25d0b4236c86122799f0b599a17747ea5f5aef5a2307aa5e3bab

    Download Submit