7965493d62037e1eb29710a6f54ff314663b745c048d5c170239bbddcf12587c | Triage

Analysis

max time kernel
600s
max time network
367s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
23/11/2023, 17:14

Sharing

Report Analysis Logs

General

Target

rules/emerging-info.pdf
Size

3.1MB
MD5

622941af33b8ab414695798386341d8f
SHA1

0be94e78c74c9bd3469889cd6a5c286a8bd96ac1
SHA256

ef87dddcb208736d1726ff968a2312b0381f9608cf24a737ad8b1fe168eefa23
SHA512

8d9c8ebfa717efe68aa90b38d4ddb642cf8458675a6befae7a026f11b88b539b58242049ae536a037b3dce3081ceca714d837c1bd434c78a3652893cd1fb94d0
SSDEEP

6144:3hhDNoYQSRY4tY99z+Nofn00l1JIya8r6:xdNoYG4tY9oEIyaR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\rules\emerging-info.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1439cb6ee5e4b909016a519ba5e3026b

SHA1
2b02abbe433c73a2e108b84c85b1a790f18a5653

SHA256
46849a1ab59aa3baf5cf4071dd7a09bf61661abffe76bd5fb8006a668f59a79e

SHA512
4afe21124b50abc4f4340945dabce1766d372a99be490d31a99fbdd51dad32b2f2d8bb3d1a0418183503a9aaee4ed2fa4936da22ca112a7446c4e6debbfbb9d6

Download Submit