371611e5f2a8fcf856b04106e9df5f344912a8fd15984d8a5d7769ce28b927e6 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 05:33

Sharing

Report Analysis Logs

General

Target

71d649cc9b9dd390c35e6fa736a42205.pdf
Size

36KB
MD5

71d649cc9b9dd390c35e6fa736a42205
SHA1

5c7a5d286c32fdae182c7379822ec3e53ad7b152
SHA256

371611e5f2a8fcf856b04106e9df5f344912a8fd15984d8a5d7769ce28b927e6
SHA512

a200cdba203da9cefebc3601f52610e26f1fddef03f404d94e1ebf2ee9a0872eac5218aa6862312e757edc3b07d3d6afa8daaa0e6adecc8d083e773a17eb9555
SSDEEP

768:3P9Sv98/mcsGywz8V5t1jPfcYuMHRGnUJX2Mx:31Sv9S9yK8zt17cqGMx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71d649cc9b9dd390c35e6fa736a42205.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9c9d830efe3220e79228495102193890

SHA1
bc1d8496fd1e1568a8a77aa732dc850859c38a29

SHA256
76b4afdd1d861ef21384afe8750f076efe04a2f01c84d63915657995d306bfca

SHA512
7677edd59f772f5d7d802a39efb3164ad945b26360e520724af7286636918653967311d1dad8fb246eaf0e4995f9b07be98f858685c776720b69b28c45359308

Download Submit