33facc0d28720871ca6c9be72491a3cf653df09353680ad349e864bff6df411c | Triage

Analysis

max time kernel
179s
max time network
131s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11-10-2023 19:40

Sharing

Report Analysis Logs

General

Target

COMPARENDO24755693025.pdf
Size

55KB
MD5

dff72981b8c0dcc68c8d15d55e51d37c
SHA1

5150b8441f40e2633b23457095820ab9015991a2
SHA256

33facc0d28720871ca6c9be72491a3cf653df09353680ad349e864bff6df411c
SHA512

7c852ee412e618dc99ebaf0e435c7b20a4513ee6bdb23a31daa2f3eba98081cbfbd1c6a6fe1fc288f6bec730204ae74cafe049e7310ef778a9f924c9ed0a248c
SSDEEP

1536:CvGH9+x63gMgDO1qT94vJlzWfgrHDf7pdI:i8+dMgR4jWeg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2920	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2920	AcroRd32.exe
2920	AcroRd32.exe
2920	AcroRd32.exe
2920	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\COMPARENDO24755693025.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
63d526f64eb06d1c4895749ac05ea037

SHA1
a212c9a237f02c6950f20ec61c2a52c916e4280f

SHA256
ac50ed001e5990782cea4f21b9bd4bde219d765db84ed66efe23703fd15a512e

SHA512
3636aa6347c12ef5a3d6d6222c00d9e350eec9914cb94079cd6f29a67c6c236c1119278909ebdfd9859f9e2135ed774e2c5fe183817beb235e2ecdf26c5014b9

Download Submit