a42d48151baeb2b2b50f1d96411752330ea150cb4250a40c6fc8e792b1e717eb | Triage

Analysis

max time kernel
151s
max time network
126s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 09:43

Sharing

Report Analysis Logs

General

Target

14584034-1.pdf
Size

24KB
MD5

642450be35893f0fe1fb3e31692b9a4a
SHA1

0d1a3f3d8286c84539e35a96862208547f96f17f
SHA256

a42d48151baeb2b2b50f1d96411752330ea150cb4250a40c6fc8e792b1e717eb
SHA512

80c9c43e762bf442f67173eb6dceaf50b476be82c6fd22688715f5ba3b4656d29c6a90f5248db0b5e38899c644fb7e5378be002ad537afd5e44c6af4ff75792a
SSDEEP

384:2f/kLitAAb5ffShAmxbPCUY/arbq92lNvEcyQE8tzqGj1mOGi6FHI:usLitA25Hqr+/arbqgTyQhpTARFHI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2696	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2696	AcroRd32.exe
2696	AcroRd32.exe
2696	AcroRd32.exe
2696	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14584034-1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
43edc6b482fa6f63fef6afa2cb8dafd9

SHA1
6a1872cfe4bd08d7064ab4ae3cf2ad346699e6b0

SHA256
073c406c3a9402b6be853537e26c1c94fec7a2f0795af6952f8b380f1e339379

SHA512
776cce336fcb50b8b118f6b8f7c7f77e7609c58f6504c92bca23b44558d83bdfa9f0b5d03aabaaa051e60979fbb66886e04c2639845d9ad0dd62d06411c0f386

Download Submit