9efec71ad7d777f31faec653a203b66a0ffce86e24cdd7e87ee9b14837cb89d2 | Triage

Analysis

max time kernel
151s
max time network
139s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
29/10/2023, 08:44

Sharing

Report Analysis Logs

General

Target

SiL3QjQCkze2u1t1ThVBqUXn7A25vgFxDlydf8nqCccIJIGX2OH8CGMm1swYHgPVnlWVRGExaj8wwWCLgfqUGNYuwkWh9WSHQHJr.pdf
Size

120B
MD5

357d616909c36be13731f9854a98faac
SHA1

e40eee4415ee5f2f63c0d5c835198190f00b8e55
SHA256

7606d133eadf18c8bb90f5175f31e6e20a2819965e828f1c8ccf63d95f37c43b
SHA512

b4cc85eef84811b6eaddff988cb894e425567f04d80e24fe35089d7d53aa42884edcf8762d8cf03e6fd5b5277c373b0a4f0d2bfcafb50390e1d79ce8f997509a

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2376	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2376	AcroRd32.exe
2376	AcroRd32.exe
2376	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\SiL3QjQCkze2u1t1ThVBqUXn7A25vgFxDlydf8nqCccIJIGX2OH8CGMm1swYHgPVnlWVRGExaj8wwWCLgfqUGNYuwkWh9WSHQHJr.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4fb3c73e372f5f04c94ad455c65b86f2

SHA1
3f3faba808473c946e220667f2897fee1a1d74cc

SHA256
20c311f3c935cf2eadef45f3717f3a1c9115f4f410de769cff44ed5fa838b91b

SHA512
9d102c408bae9a0daf7c079429975a2aecbd7edb846902cc07426818dff50236e8653bad35de003f2704589562a7db2e5c005c6c06c6154ddb1cea4882009a72

Download Submit