Overview

overview

5

Static

static

5

Important ...es.pdf

windows7-x64

1

Important ...es.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 11:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Important Service Updates.pdf

  • Size

    107KB

  • MD5

    b7be7ec845dfbcd2e1131cdd7dfb10b8

  • SHA1

    b403954f71368452adbd5d58c878d4e1edb06752

  • SHA256

    d0c544ee0bf0fdfcf23b366568e20a8e78fbdfc7044a4a8d32a62d549d34eff9

  • SHA512

    04bc1414f0049c4f766e4d9dd16039e8283f357b08ad2bef03f2070c620f68669e3e0bc8471974380a18d150495603bc3e5bff696ed6ff41f44cd3c603725cab

  • SSDEEP

    1536:9yZR6SH7RbBcq/hBOitOOdG538OZU+KaSxtLRU+9S/BqK365UBmCP4t:4ZzbBd/zLdy38AU+1SBU+wT3KUBmC2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Important Service Updates.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

    Download Submit

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
    Filesize

    344B

    MD5

    d9b8ef80fb23b40699e7e18a1cde3735

    SHA1

    14a4f29fcef830816e0e50559a11eb986972870d

    SHA256

    98337d10d39fb2e349d31cbb637e392a64ac6eaea7a05e443ef1ecb72f250a89

    SHA512

    9c976137231464f2b5f7918afda5136deb1e351a12723529d28c07fb2943613bb11243cdd445b1e795a9583339fad39b13a31700b7c347fc1c705e559a2eb1fe

    Download Submit

  • C:\Users\Admin\AppData\Local\Temp\Tar362.tmp
    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e923749cc43ea0af08573d2b561f785b

    SHA1

    33c9c30306da9ecfd1a2082d02ff18c5b76abb93

    SHA256

    324bbcf2300038c00da2c697653e2ae3f576ee1a5e2e56c69ebf10061760cd4a

    SHA512

    865d797cbfe1e994e5672211130d8980bbbb8b2b424fb6771506605d2c070b21cd723785fecb9804bb62c6f88852911381527a9a9cf503ed697630c04f380de0

    Download Submit