6c3b2b63e76de20dd6117677a3b783670e87b1e9816abe5055527b443db38ce1 | Triage

Analysis

max time kernel
151s
max time network
127s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 13:23

Sharing

Report Analysis Logs

General

Target

[Untitled].pdf
Size

1.5MB
MD5

feb0b80f58b22e8e074a888f94978b29
SHA1

18ab5a12106e7a72e8e6204883b09debf97b74da
SHA256

d5100f88c0d41d67454be90312a3661047906cc17f7965d479ab7f362cceef4b
SHA512

0cbe71d0c1d2aabdf48ebcc1b64cd68e27d5c6db31f38cc927e99d74b2e100d7c985e0f8d0a22525484ccf24be2c09d72ffaa6ebfd9df78a8b5d6efd7c977bad
SSDEEP

24576:yeeXtKatczlR7K3T/oGqt8ZwgIrRVUTywOsFrftjQtyTX3+:itK+qT7StOjUTFXptUI3+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1968	AcroRd32.exe
1968	AcroRd32.exe
1968	AcroRd32.exe
1968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\[Untitled].pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f5d6dc655b0a50fb1733d48b9281d1d2

SHA1
76c0ead6736436259d2b2aa8dec5aa86dd7b8b52

SHA256
2df9cf4d63ded0ae16bbb3911192f327e6781ed5665943d6737a302c1f4ca870

SHA512
47bbe9b9eee5b8d9aa297634247b4a5a72ed43502875dbd8f2c2c31a75cb333e92a2f480e8719b0b58c748955eb14843e443c5c2412f981df1f3c6d311af0cc8

Download Submit