6f9424a3ed626609bb3b672e2ca63b24496893456007312c687fb4bdcc39d515 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 11:38

Sharing

Report Analysis Logs

General

Target

15e7bb888ace8e8a5a543db3146a4ba4.pdf
Size

98KB
MD5

15e7bb888ace8e8a5a543db3146a4ba4
SHA1

9f3b8d2a8c857f5736201cefabc5fc0b1b38533c
SHA256

6f9424a3ed626609bb3b672e2ca63b24496893456007312c687fb4bdcc39d515
SHA512

313f8252372f9bb54fc82ea724ca1fd05b7982cabcb3dfa4ac9ef0551a983fa240a6c85fc048ea86e85f43ab59116ef349829c31ef82293f11e6cf7f8ffc76fe
SSDEEP

3072:z+8VScT1uKOwRabQ4pY733/lDGVczGMaGc:q8Yeblwcgx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2200	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2200	AcroRd32.exe
2200	AcroRd32.exe
2200	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15e7bb888ace8e8a5a543db3146a4ba4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2200

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
de5244f771e9aaf3211908cf4853fee6

SHA1
8fe3a76dde82290f2406904852c5beb01924270e

SHA256
ee21b0bc78176149daa9cc1d9c0c935a923e5f9d51edf589a939a75891519fbe

SHA512
64d2d6673475d376818a9cbd81ca2838c672d064acb22bac1742eb2d6cb885be52fd021439b7897c2de61472b90144087c67426f1afd8b8851a691c65e0217a3

Download Submit