b8b0b38dc9bffd73f05634e981edc5c3696458e82dd9255d42d748acd7d01de3 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 12:19

Sharing

Report Analysis Logs

General

Target

1f28062405fe9e7865587b4317f9f574.pdf
Size

39KB
MD5

1f28062405fe9e7865587b4317f9f574
SHA1

9f20f4c1543b4642ca75bc8650a5ca5cd50fded2
SHA256

b8b0b38dc9bffd73f05634e981edc5c3696458e82dd9255d42d748acd7d01de3
SHA512

a03c71c118469661522fa11af4d934d0464d0a99872b06f6359a01f531758b46fbd420d4da587fcf5315b52a881a4e023c4c5ef2a8848ad0850f60c66735235d
SSDEEP

768:0GmCe2CECinLSRIgjnunh2eHyf8GMK68f0sm/:dQUeRIgbug8GMl8tm/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1144	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1144	AcroRd32.exe
1144	AcroRd32.exe
1144	AcroRd32.exe
1144	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f28062405fe9e7865587b4317f9f574.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
39a088dc9409127cb1b04401e1ab40f9

SHA1
af5cfdb554642464d0980c478a4b37720009a245

SHA256
df8ac8aaaeb47c625cedbacb199a4ef7afd87098d833fc7e997f6626d6aaa239

SHA512
77f553630e1bca2b2ea5315289c61b833de937f3ed52f32b10d7329fef136b439bb116e4eaf60e6094036f1f29bb6ec0144aab1c3820910ea547450bbaa3a9c5

Download Submit