841f112ef8cf6c125c10252ec237adb9840de3981f7d68c482a6f9f789c4e07f | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 11:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0f47138421df0b4a72a385765ab47b23.pdf
Size

111KB
MD5

0f47138421df0b4a72a385765ab47b23
SHA1

c9fc9949890e6ec2ab6d97a0b3ffe3e3c2e14804
SHA256

841f112ef8cf6c125c10252ec237adb9840de3981f7d68c482a6f9f789c4e07f
SHA512

ee5c721aaa88c594493e52d45d588e257f389a48e10016c26692ebdc6491631e452eae7936007d54aa972e383997e4bbca778b03ce15faab7826655efcd6fe43
SSDEEP

3072:j7yyusdi6gMdYmIHY2Pw1n2xJzQwaZH8tk2fNKz:fnY6gMkH5Y1nUfu2fO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1732	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1732	AcroRd32.exe
1732	AcroRd32.exe
1732	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f47138421df0b4a72a385765ab47b23.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e11787ef46b759d5ad7a6fe1fa718b80

SHA1
13e3235dacdd6d43fcfb4b4396da374dc115b409

SHA256
93a39d71afcaa5dce5d06263e382fe78836fff8babca9567a4d7579882f2eca7

SHA512
ea38a98c16d765575cd806441c7db25e4f33a7c4ff814b7e485673d6699cfedf0ef235ac07260659897b09049d41efc49541e5020f008aaf1e456f015b3de17a

Download Submit