646f3db5ba9c81be81bcdc99cae70b49a21ac31285de6232b83cb8cda6a6d03b | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 11:21

Sharing

Report Analysis Logs

General

Target

13096e3cd4a270c9fe2b375eb8d28b54.pdf
Size

106KB
MD5

13096e3cd4a270c9fe2b375eb8d28b54
SHA1

d389727a7d84a876bc8bb20bd953ba76d7b4519e
SHA256

646f3db5ba9c81be81bcdc99cae70b49a21ac31285de6232b83cb8cda6a6d03b
SHA512

0932f4f243cf722fcb1db47753c2c9bb4e4782232ed9c69028d02d8d9106a3e63566cbc6396da5beee575633a471cd69a33ce27c54441ef58fb76799a143519c
SSDEEP

3072:BLduDXHaIjdUbrH03CJzd5+WVe1fTsnkUktR1Tn/:BLUCjquXncfTJ/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2056	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2056	AcroRd32.exe
2056	AcroRd32.exe
2056	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13096e3cd4a270c9fe2b375eb8d28b54.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e326252653402ded11822baf8c48cd8e

SHA1
5c38245faffbce1832440a4ad132dfbe71bbe5ef

SHA256
31d1c905f0db094ddfe145ef462618e2cd3be46b7820a0595f749cd9cf019b95

SHA512
9caf6bf7db9a7d32eda40df886a10ea5eecaeca3dfc88798e4593b3c826034e92112856ba466cba19cd6e2298901de1d2c11b5ae59742243c6ee2408e977d0dd

Download Submit