1ca8a70337e0fc7f84daab35e525e37abc858398fb3f22d724a9a93010e4157f | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 15:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

50b15f403d00d75d3fb378ef09fc3056.pdf
Size

73KB
MD5

50b15f403d00d75d3fb378ef09fc3056
SHA1

eb183dec5a4684348dd165f73a11f074bbf70b34
SHA256

1ca8a70337e0fc7f84daab35e525e37abc858398fb3f22d724a9a93010e4157f
SHA512

8374cf3b6bce7203615d61f9980871cbd5edd409629835f00842818c195d3a9071c90caef0a819dffd5ce09b823f064b8870bd430fd920a3b51823de6d6c2115
SSDEEP

1536:a1a9q0HPrUmOMGBrFHRs/hdR2YWGpOmJWgK6C+:zsyrNqBrFHRs/hj2tmqg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\50b15f403d00d75d3fb378ef09fc3056.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2f6aae65ea128a4dd5ba412776cc99ca

SHA1
1965ed94bbd1113cd9ab02114dabb06d22b169e3

SHA256
83270a3eeef5752ee765c0eefb088ae801baab774189e2cdd9bd61d3f2484588

SHA512
b7e4aead2c11c43b8da57bc0dfb253c308f5b5f978a1d0f9eb37635f01003d9634639b2f90c9ad072f60c27b267e5443062a42c96b3fd375d1bfd43a4fc34b81

Download Submit