bd2b8bd1a3f7fd02362ae8f0652fa1d394d7b774256c2e08073341031f137a88 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 03:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5dee67a621671f3ee7a3a52ea966c559.pdf
Size

33KB
MD5

5dee67a621671f3ee7a3a52ea966c559
SHA1

3df24ee05ec7c838d08a6ba5e457251521eed538
SHA256

bd2b8bd1a3f7fd02362ae8f0652fa1d394d7b774256c2e08073341031f137a88
SHA512

cacdc3de4c436c8aa60d9e624851e86178294866f3db060e3d67271a0a5de84c4c380438ec634eba14f645861a27184a285b3f0303443f9418468d2610f91a51
SSDEEP

768:LXFn9xIisCNlWaJDAsM/mmpV31zFD9jxVxTR208+:LRMklRJDZMuUV31x5Dx920N

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1984	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1984	AcroRd32.exe
1984	AcroRd32.exe
1984	AcroRd32.exe
1984	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5dee67a621671f3ee7a3a52ea966c559.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
49548f31e5eabbb06c70b0010a6ff305

SHA1
c3f7ef32810a01870d253a10a2243684f2803d0a

SHA256
9a08b4e90993599e33f14916904c1b871d0b342ed8b2f2c43e05492d29004053

SHA512
7e4ebdcd9dc77fc0d76a8ab15a8a7603ae10155e9710593cb35905614a465e99033aa1ccaf2d8dae8332abebde134576ad1e76ea9f4de427d08c1ba7b8b174e2

Download Submit