eb8988750ffdd7bb3ce0a10dad470c8cd5334b4776439feeb9b00ff85c74389f | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 10:49

Sharing

Report Analysis Logs

General

Target

0ccb053b5672a9adc6ad9296f1a89982.pdf
Size

69KB
MD5

0ccb053b5672a9adc6ad9296f1a89982
SHA1

0cdcdb7efe392e39b4187092aed8f656cb25a7cd
SHA256

eb8988750ffdd7bb3ce0a10dad470c8cd5334b4776439feeb9b00ff85c74389f
SHA512

549f3ec4a30176ee014cf68d2167023f50c5ff137ee8e9b7ec713aa5b6d8667483452d4710c1da33678e9df77c1121fb84bdc4954b294535208a487c9bfcc8c4
SSDEEP

1536:W52oRZ+k9xpWNAhJZLzOIAkEvRSu5r7Ue+4iORv:G2sGN6JlCIkvRSu5/N+4pv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2412	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2412	AcroRd32.exe
2412	AcroRd32.exe
2412	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ccb053b5672a9adc6ad9296f1a89982.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a0803aaa9505756665e39091980f6d7f

SHA1
52325de201b61516ee4adea30ea2b035fe855ba8

SHA256
1b7b723226c7d5e3cdecc7c1077adf045019e13745a1c1768fe9150b2c225311

SHA512
13f9778cb9a6059c5a59b173c00b1ab54b781960a59aa7ad0993abc9f6eb1cf9b3ac5362f0f961bd69cca76d7650455bac4ae80941e901db9b457c9f8fddeea9

Download Submit