Overview

overview

6

Static

static

6

virussign....d0.pdf

windows7-x64

1

virussign....d0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28-05-2024 17:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    virussign.com_4ff686c5afad69994f8e967e1e4b3bd0.pdf

  • Size

    140KB

  • MD5

    4ff686c5afad69994f8e967e1e4b3bd0

  • SHA1

    aa0136ca929d23fb091c41fd6ef8e70cca1e993d

  • SHA256

    351421ad76e7ad00acd53d8a0a5d5cf6802ea3e9d5ca0ca88a763d22c0acc81d

  • SHA512

    f0708a7bd7f74f5bdd480b9d91e857925232cc9cdbe01687f50eb43f5d7252aa0a9a897a3c8b24fc48072d5fdd845b407c7b93e14a7a874a07734ef70d3ecaca

  • SSDEEP

    3072:TSVu2LdarkjTvr6JtwCs353/nG1Paj95AILqr3DjN:Wg2Lykjn57JPGNkjOR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\virussign.com_4ff686c5afad69994f8e967e1e4b3bd0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    135340b47c6f3346a2a744b7925bec38

    SHA1

    14bcf085aca087966e0d5117648e7985426286d6

    SHA256

    0680bd80cf79313ec36901c03e79f0c7d6c83e0153558f3cbaeb1355828f6211

    SHA512

    ac2c92aa690bd050e2ed39dcddacfd23ff472a8b85276b9f53441f9bc716c0449492dd13910d2a147903cd2e649c9e3f48e4ec35ee454be4db2cfc705f11e76c

    Download Submit