00b58225196495392b7407702a2c04e25493cf86163ed0500b092c8ce1d73a53 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 02:45

Sharing

Report Analysis Logs

General

Target

557a76464610a97a61e0eb9f0f38686f.pdf
Size

34KB
MD5

557a76464610a97a61e0eb9f0f38686f
SHA1

e62fb317f03e1f63a13262bd146425fee251db08
SHA256

00b58225196495392b7407702a2c04e25493cf86163ed0500b092c8ce1d73a53
SHA512

44823cf0a50a60ad9b374d5fcfd5bdf9675cfd1a34f9bb7af034b75ff60af420904f22d3df2d813d9225a00a854b4f01cfcf680fa40a8efecea3c179dce04f28
SSDEEP

768:OhIhR6AxssK9rAR7H+RbCvsDIHGUKuVeg/H+:2IyxWt0EHGXi/H+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2400	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2400	AcroRd32.exe
2400	AcroRd32.exe
2400	AcroRd32.exe
2400	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\557a76464610a97a61e0eb9f0f38686f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
933e38573f2dade2e3c158f3a1121366

SHA1
1280ac5d13b8ea9eef57bd4f42a211560ce829b3

SHA256
e4eac55645e2dc5dca629f1e0fad6056f7e4991abfa11409d14b40e32fabb91d

SHA512
45a02ce0d153e1d8447e2e0a886b22db3166cc284e0b068f3811c8d8b13a7c0fa1937f9991854fe9b6d860585b8cff375fac2938ff6a8a512e34bf78aaa6e4b8

Download Submit