5648de192ea50e093a62b225428be6b6178999a9c1936cfda5fa8b007431a3df | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 03:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5d0f4b01e1fa68f71047a6e5053484d9.pdf
Size

34KB
MD5

5d0f4b01e1fa68f71047a6e5053484d9
SHA1

5d7187610c82e77f8c083347e4c831c3ead24120
SHA256

5648de192ea50e093a62b225428be6b6178999a9c1936cfda5fa8b007431a3df
SHA512

646a284fcf5ff342d5101d60e2aebefcc7157a431046c15ff97d04f651cba7ef02736882ed70e002309a2e25e365f43d0c5578def4a55a144d71bad9aa340cd2
SSDEEP

768:yAthwKDa3sKn97Y7ZyVGG2H7wJVWZBs6c/aSY:/3Dajn97S0VGzG6BJc/aSY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2448	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5d0f4b01e1fa68f71047a6e5053484d9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2c99283dfe9373258f3e3c05b2e877bf

SHA1
f24e8a5009811c6484fa0844aa17fcfd2170c5bb

SHA256
7f7ea3981ae11c102d600369b34e0b1219a37f3c7ee8cd078f020a0b56beae66

SHA512
21051b365d937dfbcaa84e088b091d8dd27a8b3ed403d2347c1e061a1af86fe20557bb9a308d153f093b494d27efabddebd7fca2d2cbcf010be855b74ed328fb

Download Submit