491dc157144285773512b6eebf00e35a7a3a9cb59800e7a46ccc1ddca7330bf3 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 22:06

Sharing

Report Analysis Logs

General

Target

b1adca315be275221be23f904454dfce.pdf
Size

120KB
MD5

b1adca315be275221be23f904454dfce
SHA1

14ce75547cb6cbd43a79a138f6aa736cf1952fa9
SHA256

491dc157144285773512b6eebf00e35a7a3a9cb59800e7a46ccc1ddca7330bf3
SHA512

eefacc13f9541d4bdb17eddb937b63d1bdb271e8740459379c5cf52983c81f2e352f4f1c6b74ee71e6d650a85e5e6dc8b8acaa01d75e7a1a311c29373773ebaa
SSDEEP

3072:epYerD3Vo97xRYM32RdVbFkx3lshHRvRR:TevVo91R32RnIOnvD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1272	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1272	AcroRd32.exe
1272	AcroRd32.exe
1272	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b1adca315be275221be23f904454dfce.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c710ad369e4d258a1151f1a8b151dea6

SHA1
068ec8ab5c1e9d82f54ec5d9b24cf1d0bef13088

SHA256
b0d12c36bde73a01be0b81b124b7e13fa010fe948915edcc1ecb58853f772bfd

SHA512
f9f7a375f8dfd8886e76a731fce1cc2f2037c3188869039ddbfeae55ac3962e04fa1a373c7dcedb2c97c1e7bb3bdb3d791f2fd961f9d951cd0c25a20c07593e1

Download Submit