af8eeecdc788efba649e7ce4178caea2147022e3527a35730d7abb968ce9b300 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 04:53

Sharing

Report Analysis Logs

General

Target

69df6627b1bea163de7b6428d7c0cc7a.pdf
Size

35KB
MD5

69df6627b1bea163de7b6428d7c0cc7a
SHA1

de71aaf2faafde9d50e389c112edec5bfd328d05
SHA256

af8eeecdc788efba649e7ce4178caea2147022e3527a35730d7abb968ce9b300
SHA512

2069fbeb1c82ed08ca02a73ce6577a924023d768539cbfae8941ecb6e7fb138e9525d41c7fbc3bc63964e6318720e902d52a8f24fd76626f87806fdb1e9db9e9
SSDEEP

768:N+vcmutQdzvU8GR7575qDvwDVU7KkNhUCtFXFT5/F:NScoDSNFqDIK7PzUCXn/F

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2204	AcroRd32.exe
2204	AcroRd32.exe
2204	AcroRd32.exe
2204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69df6627b1bea163de7b6428d7c0cc7a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4155906bb44daee1bc912df6b7c2cadf

SHA1
f752489bc3003c451013150af94f38753e7e9cd2

SHA256
89ec70aa1e289e8eb214673b3c35fcb3476d99698d2b235b3ef7871dd4dd69e4

SHA512
5a436e13ed68e18b975fa9c3ceb3b83d5bc4ac48772d90c81a6518512d0d2ef4338d6c805c623938a5b44343c8c626e4578af953af76b5aa5c85089452f5ba8e

Download Submit