6efcf1ea602f4fd2949c32c5ed7991a64c32d244ddc626e686a3654c73ff19fe | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 03:56

Sharing

Report Analysis Logs

General

Target

5ef755ea3cb7020c3dc9a0a93005204a.pdf
Size

34KB
MD5

5ef755ea3cb7020c3dc9a0a93005204a
SHA1

3456ef012ebc3b2efd1cde301b93f080d31d4fbd
SHA256

6efcf1ea602f4fd2949c32c5ed7991a64c32d244ddc626e686a3654c73ff19fe
SHA512

960b83ef8e3c201b9d85cbe935d95a63d36b894d22a812fec3a243e303ffa83a22953fa6803be8142d3be52154814db7aa1502d607d15f44f7531e84dc964023
SSDEEP

768:PCuFa9GIFdsfGYevaNUAex6c4ZoWZjlp27UY6pz1:RDIF8NZHoW7pSUY6pz1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2492	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2492	AcroRd32.exe
2492	AcroRd32.exe
2492	AcroRd32.exe
2492	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ef755ea3cb7020c3dc9a0a93005204a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
45ddbfc17d5e3879049d01d0fadffdf3

SHA1
77db03fd479af51c0c6b8fb8d9d83a5d55065bca

SHA256
0004ffeba5911633a6012ca0090c8667ac2fc51b4c09f9a9d52ef0d120ef8113

SHA512
1515b6501d094ae84f06141b8681df85d95b31fd335cd1e179f20c0c1e0067995e9f188133bbb0bc12f2fc15d9bbc638eb6a60f82926b6acb6fa20c5accd6c66

Download Submit