9f2486d574568fd9f6cf2e595e319892ed10ee7a3ec4eca11f4b46d0cdb1b349 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 10:31

Sharing

Report Analysis Logs

General

Target

073b7d1b43aa6ab27ec437be8c973cda.pdf
Size

111KB
MD5

073b7d1b43aa6ab27ec437be8c973cda
SHA1

f369f805421727b5ca0190c7424ec8df48bbe03b
SHA256

9f2486d574568fd9f6cf2e595e319892ed10ee7a3ec4eca11f4b46d0cdb1b349
SHA512

9b64d3efd1c07e1e1ed666af8105480be00f9e4a0812dfc42656925744af820251da5cc15797cfbed0889a04e2ffb5097624a4fae2e3e1e13b5fa1ab0964f820
SSDEEP

3072:P+UGTwNy9A3YIfh2Xc2X1dGNUg0VRCFaZV16YWax89l:P+UGT9y3YKJ2XhB1sb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3016	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3016	AcroRd32.exe
3016	AcroRd32.exe
3016	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\073b7d1b43aa6ab27ec437be8c973cda.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7669991e37294aa8b53c2ab529233eac

SHA1
1131d16963d29a133baac9ac275096cb2aeb28b0

SHA256
5ae381ecc45ef595d3dc021a0385643a098261d71df8a23054d0e2cc8fb16771

SHA512
3e055d324808a0709e50ce97a9fee147d2a16494a0b9389b1a45a8622602eb2a1e993b80b092bc8c94a2fa213e6d27a570c60b3ca47563cbacc4bd533772d68a

Download Submit