ac2a1d2a1d240c4a8afed0ae650cd763441cc23dd500e8c29dc78b3d81369d24 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 10:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

083fb1503d482569ff4bb4271b3e9d21.pdf
Size

68KB
MD5

083fb1503d482569ff4bb4271b3e9d21
SHA1

e0b6a0fbf7d7bbd5be5bc8a6ad77d5928825cbfc
SHA256

ac2a1d2a1d240c4a8afed0ae650cd763441cc23dd500e8c29dc78b3d81369d24
SHA512

39a32b31cda1a2fb59e8bcbdd4a31911f4f90c6419ced833577ab6a668b26cc5b33e21b08c1f1f5ce2c74f54b3c48592a6e931020cc7d13df5c382de5529d768
SSDEEP

1536:pq2sWkpIvZUCMrki2bHmi4WCpOViJoPWiKp5x+VfkFlo:E2Nk0lm+ViJjufX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2876	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2876	AcroRd32.exe
2876	AcroRd32.exe
2876	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\083fb1503d482569ff4bb4271b3e9d21.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
cde0e17f0a21612890ed8f959bdd7719

SHA1
f9edb38d70b4e2b750abc94a3600993c22bd1157

SHA256
e6251fae3641ef1d8871ed6381e86a0cf4656b7976fc24b50bc4241053b0726b

SHA512
00511b7253baa7985601d7273212ba6ff26a67c88f67fc339e444d1e57f82d09a8d50b937641adfd39170ea6d30a726343665992e5520b9049f6729da2e6d0cd

Download Submit