a4455ec35b8a73aa174524677171d20224075660888b2cfbc80190b90193463e | Triage

Analysis

max time kernel
150s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/02/2023, 16:00

Sharing

Report Analysis Logs

General

Target

PDF-DOC30012023001.pdf
Size

52KB
MD5

fbf30ec7e7203263126e7d780ab2320f
SHA1

b13ef3ac52f6ac021d59e0b5e07b566f288df15e
SHA256

a4455ec35b8a73aa174524677171d20224075660888b2cfbc80190b90193463e
SHA512

5e41e7adf172516cf9e91e465c182c581ffd16764e2dcdec823ec2b9b0666f8e2bbe3963fa200087d862ebefc61dd38629bcfcb3fb2d9b4d44aa3e4df1737846
SSDEEP

1536:GGVHP3Xb9PJ9ZovublyOml1URdkihzHa2yCgq:GGt35R0ubl5mlWR3VHqq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
976	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
976	AcroRd32.exe
976	AcroRd32.exe
976	AcroRd32.exe
976	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PDF-DOC30012023001.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/976-54-0x0000000075891000-0x0000000075893000-memory.dmp

Filesize
8KB

Download