3e8fc2c5ffad55b78b6b262dc98d8d4c7680d9ea5b5afdb29add241989178ce7 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/12/2023, 15:54

Sharing

Report Analysis Logs

General

Target

556d5eb6c4df2d2b1668ec29411885ea.pdf
Size

135KB
MD5

556d5eb6c4df2d2b1668ec29411885ea
SHA1

eb85f7d0c11732c7783e16afc86a42c77f6fc4fa
SHA256

3e8fc2c5ffad55b78b6b262dc98d8d4c7680d9ea5b5afdb29add241989178ce7
SHA512

388000fc7da4a5c94debe9b0b25d7447a1be264d4c449370f985eaa1a251b83230e4d71c39f733a3ef03ac34d9124c76f23c6889c4b2f3b4db5ea107580f1249
SSDEEP

3072:PzUEqqW0Fho91oTHqnPML94MiPuWgtYiGuYvYWiR:PAznNoHL9nx9Guew

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2244	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2244	AcroRd32.exe
2244	AcroRd32.exe
2244	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\556d5eb6c4df2d2b1668ec29411885ea.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6cc974d358601082583a0c356f3655e3

SHA1
68f9833b305ab6a5fa154890eb135890326c22ba

SHA256
dad5d9d45fb5e669ac17e2d49109ef13987733cc794c63f9c310064caf421eb6

SHA512
8463a74632a6a386542cb75380cacc0d9cdebff533d52ad1101ea78d39a394ef0f4bd884eb696d58ba5fb7d77c047fbe5713c508d67de8027d9d7c7e000a10c5

Download Submit