0ce2f8925c543aae4ad8d53dd2d7b7c3798d0f593783c39df1b78d4c048a67c2 | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 02:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5471c593aad226bf76e79fa998186ed0.pdf
Size

43KB
MD5

5471c593aad226bf76e79fa998186ed0
SHA1

3327ebd7394efa9948ea5fdc48654b3d22abf18f
SHA256

0ce2f8925c543aae4ad8d53dd2d7b7c3798d0f593783c39df1b78d4c048a67c2
SHA512

23f2d88604b09dcd162ee49c32de1050b470e18005ebd7f65e63b78d13938b4c990dc37933b75866877d64a6702092689a50c16d83ed6ef03bffd3c762a584fb
SSDEEP

768:TwkKt5fYhFxUYHBSTZhdgM/+mnUW9gi15AiWn8cVGgM:TwkK/KX4d124HVWndGgM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2040	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2040	AcroRd32.exe
2040	AcroRd32.exe
2040	AcroRd32.exe
2040	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5471c593aad226bf76e79fa998186ed0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f88ce5e07f45b1ec97e916baa58c298a

SHA1
fc26b3059eb0db0678d31a6e00bdcd9e1ee13063

SHA256
2b5df432f86dba417b523f44f87326797716395f26260dec5702883dce47dac9

SHA512
3854565749edc9fa45ca3302118f0e0516819fe98139c7ed14e2e7c823b22511d5f9953c3fc95e65abd9a4ac441d1ec8e4f673860f23aedacf02f5064480d29b

Download Submit