edc6b742bc2a2766933415d442794cd50a5cc86487d8089b68f40809b7ffc6b8 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 05:00

Sharing

Report Analysis Logs

General

Target

6c0f2ff18f51f404dce8f6dfffef8dd6.pdf
Size

34KB
MD5

6c0f2ff18f51f404dce8f6dfffef8dd6
SHA1

3f057a9594574d9a46c8e5aa2f690061434ade7d
SHA256

edc6b742bc2a2766933415d442794cd50a5cc86487d8089b68f40809b7ffc6b8
SHA512

bbaa33cc6a4bb6e9a2ca6589a8e43f0197968207b18a5049d130612f11265f08380d6443c6a61c560006d3cbc7950fdf68fe610ac9e686791bac7d3c611d5cd5
SSDEEP

768:Mdjt9vssUlSsuWS7kLfzc2ppxo0VAsrCHp7N6L9P:MBt9vymWS7Sr9fTV7rCJy9P

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3024	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3024	AcroRd32.exe
3024	AcroRd32.exe
3024	AcroRd32.exe
3024	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6c0f2ff18f51f404dce8f6dfffef8dd6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e8f9447845a195647f9994525cac0d80

SHA1
243e77797952653cc996ceb4d315c83a63ba3d9c

SHA256
1a48ca923d1453bae5fd69f2a0f37bb5b37e559dfaa012cfe5dc0a53813d3c2b

SHA512
37f9712449156af41174ba9bcb07bd3506fa794e75e1ee86a66e2d4022373fe753ea52b35744481e969729bbe5b5fd66b33994d203150bb9e168ecdf93b093e7

Download Submit