Overview

overview

3

Static

static

3

1. Kadınl...-1.pdf

windows7-x64

1

1. Kadınl...-1.pdf

windows10-2004-x64

1

2. Kadınl...-2.pdf

windows7-x64

1

2. Kadınl...-2.pdf

windows10-2004-x64

1

3. Kadınl...-3.pdf

windows7-x64

1

3. Kadınl...-3.pdf

windows10-2004-x64

1

4. Kadınl...-4.pdf

windows7-x64

1

4. Kadınl...-4.pdf

windows10-2004-x64

1

5. Kadınl...-5.pdf

windows7-x64

1

5. Kadınl...-5.pdf

windows10-2004-x64

1

Resubmissions

15-08-2024 23:37

240815-3mbcbswgkj 3

15-08-2024 23:36

240815-3lyq8swfrp 3

15-08-2024 23:35

240815-3k8j2swfnn 3

15-08-2024 23:34

240815-3kte5awfll 3

15-08-2024 23:30

240815-3hc1cs1hjb 3

22-05-2024 21:23

240522-z8th9ahd54 3

22-05-2024 21:10

240522-z1jn3sgg8v 3

22-05-2024 20:58

240522-zsa2zage37 3

22-05-2024 20:37

240522-zd98hsff7y 3

22-05-2024 20:28

240522-y8z6csfe59 4

Analysis

  • max time kernel
    149s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4. Kadınlarla Tanışma Rehberi Modül-4.pdf

  • Size

    3.4MB

  • MD5

    adf203e760df4b60b61591149b7497ff

  • SHA1

    1b4d7e44f78e4d5d64a5fde76108c612f807f0cc

  • SHA256

    b7967dd030eb10fb9787574220145b3fbd11954bc77f8b7e796a22192026a6a9

  • SHA512

    01a696afe5eccde6c32e3456640439d31d7f4d808082fcd22e2091c4f0ced66c7d9b6b8d6012f9fa27b27432e2051e082560473cbbd81c11b0d92eb925c6ffea

  • SSDEEP

    98304:4FZnNgwqcqaqRuMqxTqjA8TRdKEeMsKQjWTEWuo4:4Flef8MqxTOjmqQjR7J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4. Kadınlarla Tanışma Rehberi Modül-4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Adobe\Acrobat\9.0\Search\ef2f0fa63919ee47bf8f855adacbb963.idx
    Filesize

    168KB

    MD5

    c34c0bec221cb90931494c1740858e29

    SHA1

    e357dc1e261bd78447aaced7fe0d7374cc182ae2

    SHA256

    f87c780d5c2ba87141a5ab6fc94d8750beea81356b876e7d5979a50f4aaaa9c7

    SHA512

    a68fb20cf7831863c26bb617c8d9bf5b1b5ded91427c07846236dcb2298014474b704ddc28763eb41581cb80abda4492e2f493f41bd7da9d85274de295f38a0a

    Download Submit

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    75694a3fc994461011f3f2c37a70b203

    SHA1

    b8d5ace8af7f2a13b2c4820ac19532bad668db1c

    SHA256

    f20aaa9f5de066d6a756ad842fceaf3b119c53e92806649abb2603dd145c277e

    SHA512

    b89ef644fd0cba4041fc6e36ef79fedf5e90ff776b68dfd8739a6e9abae31f3f3cd8f2212d366195c828c6de03ffa9ea16ecc0257e398154895fc66e38711137

    Download Submit

  • memory/2976-0-0x0000000003DF0000-0x0000000003E66000-memory.dmp

    Filesize

    472KB

    Download

  • memory/2976-18-0x0000000003F70000-0x00000000040A6000-memory.dmp

    Filesize

    1.2MB

    Download