634c95884726f51edf3df057522dede8c54aa6175a485481c65ddcbda5052437 | Triage

Analysis

max time kernel
124s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 22:00

Sharing

Report Analysis Logs

General

Target

af6b7e7287339e767ac18b07981d3794.pdf
Size

70KB
MD5

af6b7e7287339e767ac18b07981d3794
SHA1

0a2ba458838f604247f5a2688bae0476ca810d68
SHA256

634c95884726f51edf3df057522dede8c54aa6175a485481c65ddcbda5052437
SHA512

bead08c8a0e48efc8f9296d5669fae4735eb63e3bbd03a8f58b3432fb24b96d03683ca6f5c4c9c38a32784b11e18deda98f4f6bb494269b591e793905ac2e973
SSDEEP

1536:vgtKSfa37qu5UcjjXFz0pzQDO3WUpO7qWxE+J/W+V:GmBz0mDOq78+JJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2276	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2276	AcroRd32.exe
2276	AcroRd32.exe
2276	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af6b7e7287339e767ac18b07981d3794.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
775313b7ccabb2ce67bb850ba84991c5

SHA1
1cbab424efaab9500be41d773aa52bb89f85038f

SHA256
b4f96cfc8c71279c42170ea67958ee8595bf9f673cf7b22fe5fde22282d317dc

SHA512
514f6e161bdef1db7272168ddba8c0d4295f39874927b7f863487de83c67c3fc361f30a6d6fc84091cf06b44b4fa4f74e276651b995fce0cad2675d9767ff2a7

Download Submit