ffd51d2ceb0f02dd10cd7095770f006770feceddc932328518d93d453b838c67 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19-12-2023 13:42

Sharing

Report Analysis Logs

General

Target

373aeb8461f1f837ca758cfd1bf9f37f.pdf
Size

111KB
MD5

373aeb8461f1f837ca758cfd1bf9f37f
SHA1

65b42e35b5620186cd558b4f99ee03d6bc4d1ef4
SHA256

ffd51d2ceb0f02dd10cd7095770f006770feceddc932328518d93d453b838c67
SHA512

f8615dae607ea3f11c2802194e0db83cc215e370baa8108647ab90373b67b115b8de3aaff8075ded7d7695395a9b83b3012ad963f77043bf919a0e06bc3879a3
SSDEEP

3072:nhJDa711933h+g4GSvM0j0zJhXblxHzga8:hZax194gRdnhbLgp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2992	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\373aeb8461f1f837ca758cfd1bf9f37f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
37fb0b8e6aa61c4b4ccebedd5b03b79a

SHA1
db85fd71186749ce9cd7f26ab8a6a0985698dab9

SHA256
4ca77409c80e06b917222150e78191a2f0aae024f6764432a0d853492c32540b

SHA512
d0ddafbcf519b5d4cb48abdaa591fa4f3ccde79baae3dc17213b5abc7dc9f7960487f2a360e8bf8a3773b723dcfe915f814c54985a9130d42b280385fdc6a077

Download Submit