b0ab82f4d953dca1485b3d47a9baf987eed8eb385a5a367e089d817049d2bde9 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 14:32

Sharing

Report Analysis Logs

General

Target

439da8dec7908b4e98a8107a8a0a4105.pdf
Size

97KB
MD5

439da8dec7908b4e98a8107a8a0a4105
SHA1

1f8665939e7cd82afc3dd7bde782ef9866439c3d
SHA256

b0ab82f4d953dca1485b3d47a9baf987eed8eb385a5a367e089d817049d2bde9
SHA512

b2d730c22f82944280c32aec36a4ae50dfec5ed9b5560eab8f8106de7c8fb37d7b377143c2a03c65433a7acdeee13f88a7b4de6fd4dd5d2b5b9dc6a283a0e69e
SSDEEP

3072:nRNoyaa9GVdnVfqdf3P5sxny2Ni53f5BAD:RmyaeGVdnAlBaiFs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\439da8dec7908b4e98a8107a8a0a4105.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
034495181435c8a6d4f37190628c3908

SHA1
9f44dbb55dfe104dc40c3765bb53c592a17327dd

SHA256
79d3a3f1940e2d4e3332b75b6e8ba645384dff0a1eb78858dd4663181e8b8e10

SHA512
822eedd836931790ad57648665c1d07552a8298023e3ef5aed8f8eb14291b4cd6128d23c344f374030756f559396e2ba14e303181298ad427175760b4654c05a

Download Submit