8b649e9dfde43e5b39666c9b196abb82e67c80937f67bfc1f5232c6699f4b483 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 02:51

Sharing

Report Analysis Logs

General

Target

56512e3a40d40d35ff3b89252e73c126.pdf
Size

35KB
MD5

56512e3a40d40d35ff3b89252e73c126
SHA1

99550199bea7d431183387f7b6750939a93e09f4
SHA256

8b649e9dfde43e5b39666c9b196abb82e67c80937f67bfc1f5232c6699f4b483
SHA512

94aa67d16083d4634ca5cab92d413794f40e7ed49c68edf8441ddc5e514f0603cd62b0ec43c52d0b2f007a49835975c1cdd30bf587bcb0f4b58dacc77c27c606
SSDEEP

768:2SdFCCk8NxNsQtW+0BjsptY26vLZi0T+m6XZ4WhBl:rsixrdoU6Fi0TaSWhBl

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1728	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1728	AcroRd32.exe
1728	AcroRd32.exe
1728	AcroRd32.exe
1728	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56512e3a40d40d35ff3b89252e73c126.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
752672b43a69a3be0db6c3b054569414

SHA1
025d3744555afecab7679495965eef10305f7d43

SHA256
5aba958f7baa0c62ed56492538ebc209552c19498cf5779de9dc6c1774476350

SHA512
77bf63c582e72f300618ab4675cc07b84645f190d7ef41d68e1d0946e8de9648c6a7eea5568c5be01393e255f260fa075405f54e6cdeec2824108ebd353b545a

Download Submit