2ad88f583de8dfd6dbe5cb584f6f724e49d5d589809fdec1a3d43ad10abf06da | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 04:50

Sharing

Report Analysis Logs

General

Target

6816b3bfd7d1814eff9a48ec87415ab1.pdf
Size

77KB
MD5

6816b3bfd7d1814eff9a48ec87415ab1
SHA1

c00bd6c02767d90fed808cf0b6366a49270b53ab
SHA256

2ad88f583de8dfd6dbe5cb584f6f724e49d5d589809fdec1a3d43ad10abf06da
SHA512

e35d418596f75476e07922f8fe35dde48ba9a4a67de3ce5c03fb6df56483dc07b44ed83b0e4ad089e8c0dfdd9e0d14ed3221009d14e68468c312e6243c156cbc
SSDEEP

1536:JXJCkoZonuSJox6p/wcbq2ClvKI4Ra1Te3WPd9W5ULz:JoFSJox6UgRl3krW56

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1032	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1032	AcroRd32.exe
1032	AcroRd32.exe
1032	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6816b3bfd7d1814eff9a48ec87415ab1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
98968bedc557ce150df8cd7a685dc8a1

SHA1
7306499afd3e81e4dc7a79c51fefe1fb007dd14a

SHA256
922b2c691b9ac7e0435f948e0164b565a6385d88838b3cd632254b829d76caed

SHA512
39da0b28355dcbdb9871ac0cf95d2d57a683d7f61ef6dcf1d38e46e3bee4f2467146715c38154cc11e504af456e61cb5cb41eabb7e042f8b29f8c4527f2fa22d

Download Submit