Overview

overview

1

Static

static

1

Demanda.pdf

windows7-x64

1

Demanda.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 07:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Demanda.pdf

  • Size

    766KB

  • MD5

    3c35e6c2183ab64d92068c5d343a4414

  • SHA1

    1edb6e8add31868f7f7d7b565f92de4391334091

  • SHA256

    e5d5ef984979616169498dc11982a9f46e9a45b165b626b9e3ff9bea0977fc04

  • SHA512

    f0879a40d8d6552eb1e40ca634e9ebb21b5738c405baf92dae6583d7ceeaf48b5abc2317eec772254d852717245c5d1fcb8999fbc9e7593c2d8fba99f3fb38b2

  • SSDEEP

    12288:NdjvBsa/fTJpo53CPwA4aatEomBuqm+1011TL9kIqQJECkJZQBx92YS7Rvzql0Q:l5I1CT4a9Ty1E4MYB/2YcWD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Demanda.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1633e33dff0d266797404411ebc469de

    SHA1

    b4f3a9ebcc0ea115ebc36b14676d4ec6fc568377

    SHA256

    410f119d0baa3a371a06d39032448b863f17f028f6e1a09fb76cabea3c1132cd

    SHA512

    3bf5448c1998988ec70d1ee0edc0f212a97e5fdcd86550eb5e6a45b71f1f37809f9465cb76d78108ef49d01a53697bf730f9ed190e32afb6224b8a7372af582b

    Download Submit