Overview

overview

5

Static

static

5

47882a21dc...0N.pdf

windows7-x64

1

47882a21dc...0N.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 03:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    47882a21dc6ce9becc30806a104d54d0N.pdf

  • Size

    33KB

  • MD5

    47882a21dc6ce9becc30806a104d54d0

  • SHA1

    ed9a4e14d95b0270464b3c1830cbd961794b6668

  • SHA256

    89f9a3b087e2d565b48809bc2e7aa56974ae9ce994eb55b5863f03f1e38a5fa3

  • SHA512

    3694618c04a276f9d6478d7e0e09b2ec0e0585ab0745d14dc4ddd5ad4c425a701c4d2dec7758871e971a7cc691ff8a7ff41716b6b3c740eb50f730d35230e712

  • SSDEEP

    768:yH9fRK6MCy+wFMzRKaujz3eS2cWROUT5xVWqiLTpcVNhXV/TX:O9fR+Haaz3fC4UT/iLTpcVBX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47882a21dc6ce9becc30806a104d54d0N.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a624346ce5d5f7e550a547337bf602f4

    SHA1

    8455142160f2791023a6eb5b95220860dcd83f30

    SHA256

    bd732258963b10902a343ef7e580dccee088be7a74ea9d7a9dc65b82977301b2

    SHA512

    dd601dfc35750d3ca6cf71a9387e7eae14a967cf31e6c2efe781090aaced18325e3dca393861490d7f894103e734dfef1395dc1bdb79aed7e2f1d1c8b9fbb914

    Download Submit