9efec71ad7d777f31faec653a203b66a0ffce86e24cdd7e87ee9b14837cb89d2 | Triage

Analysis

max time kernel
150s
max time network
126s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
29/10/2023, 08:44

Sharing

Report Analysis Logs

General

Target

MnFM6Eg6RAJGskH5MVBrggN8GybYwC7h2vvZcAM9bVrIWiAmVRWjleBEFpFIFk6NS1PDiuAf8FXfUDhJiLETkjV8hvbeJTgmeKiS.pdf
Size

120B
MD5

7c1ec503e35c5501578c0507aba4bedd
SHA1

f7935a006e0462e9929bd911e2ce712e81d3026d
SHA256

12f57d14ab3fdc9b3c6a1c41c9eb6842217c1169d1bc2650faf5037def0932d0
SHA512

824b03b3f6ff3dc77f375c3513355ce88b5992c7a6075ea3ef7d0406bcfb5570cd3caae0759df42598a47cdfd7653de2bc983fe8baab12642d8a149e2d5774d7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2612	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2612	AcroRd32.exe
2612	AcroRd32.exe
2612	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\MnFM6Eg6RAJGskH5MVBrggN8GybYwC7h2vvZcAM9bVrIWiAmVRWjleBEFpFIFk6NS1PDiuAf8FXfUDhJiLETkjV8hvbeJTgmeKiS.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c76ee948844cb67583d1eb15f5d8fd85

SHA1
1c4886792fef4a1fa4b5f713c3465e3b98703c51

SHA256
39a37a644a9ab5e85dc85001c37094be5d89e169f0a933d5503ec26434b5cf6f

SHA512
fee3f473b2774542d328864fe3ca7304e26addac7cc2d3da63cbba47e1535c8e8e2968c7971126b6f6c47bf0a63901949f87bf27d9597972fd62b1540779edce

Download Submit