35fafa80b2362bc2377a5601e5b7515f18029cd5e6e61d11994ca5f8c2ff4d80 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 02:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

56e6d1e29e1907fedc59da322dffec6d.pdf
Size

33KB
MD5

56e6d1e29e1907fedc59da322dffec6d
SHA1

4f81a5219f695afa26b48ad842720ba3cb9e5fe1
SHA256

35fafa80b2362bc2377a5601e5b7515f18029cd5e6e61d11994ca5f8c2ff4d80
SHA512

7b32f3e06b6d514cf8d6c286de257058b9c083739ad62108bbdb4bc8a300059ab09ffa910b26b6e07774d6f96319f34504211c851c1f508dcdc5f4089a36830b
SSDEEP

768:ysG5lSRXN4erZHw1IKIa4j2TRN1OfLamkZZiKHDi:FG2NZQ0cRN1OfS7i2Di

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1724	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe
1724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\56e6d1e29e1907fedc59da322dffec6d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
00f51b9ca6d99c48844f71370564930d

SHA1
73af6b15582eb46487984b7404e66be5fdc09859

SHA256
4b8b5aa96f33604c8567a79a5c18c612d3fba6372b46743a6f6e771fd7818dff

SHA512
ae5dcf1893c688086f0f63af5f6da58fdce20dc513fcebcb55cac8dbf3f3fc72514e44165ab823c74f287446844edd9b6422880d3d2b4fae968c5837a2442072

Download Submit