Overview

overview

5

Static

static

5

1fdb3aa304...0N.pdf

windows7-x64

1

1fdb3aa304...0N.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 23:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1fdb3aa304097a0a38e5d09892dbf9c0N.pdf

  • Size

    32KB

  • MD5

    1fdb3aa304097a0a38e5d09892dbf9c0

  • SHA1

    2c8e41e4f765790d0699df05eb0775daaeba9fd8

  • SHA256

    e5686d87ff2003b9ff20d4f9776c2ae8f1b18f977ec8b0a9693a769617c072d8

  • SHA512

    1e4bdb4b66e82ff93a2a7cddeeffd423ebbc54aff9eccddb38260520ea7fd4c51f41ae52caa5ced659dfe75b94cd6b0365ceb960951c9a1510cc58483e4a7ddb

  • SSDEEP

    768:GwbWKi6MCy+wFMzRKaujz3eS2cWROUT5xVWqiLTpcVNhXCgA:l9mHaaz3fC4UT/iLTpcVLA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fdb3aa304097a0a38e5d09892dbf9c0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    38c3b9e61e1c0ab69b3d08960d220520

    SHA1

    866da02cf866dc301ba4b916ec2bdea39367d919

    SHA256

    1d5e4334abe4b8acd4534cf352c5394103982fda6353931d76d0871acbc1520d

    SHA512

    0f1ca49207d1218dcb8e6aa8f66edaaf5b9d6f6eafc12520085a7586508350aa48d9f0763f78aad28fb8a284b51079a27df019cea3882847037a24ed238da062

    Download Submit