511a3de7fc02cd714c37ca92c565ce36ab9bdbca60dc2006ed72a92363f4f3a9 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 05:51

Sharing

Report Analysis Logs

General

Target

732d563f94ab87e08f793ce53efab33b.pdf
Size

42KB
MD5

732d563f94ab87e08f793ce53efab33b
SHA1

0efa94e1f549426cbffbdc9f84b4d576160444d1
SHA256

511a3de7fc02cd714c37ca92c565ce36ab9bdbca60dc2006ed72a92363f4f3a9
SHA512

b1f945b51b76c287824dd4b47bd9006e9ce96ec72d28b501821cc13bb23c00e6b8ae86d96a618318fec97df319a50fcd8f726b20f46b7273b9d026c41680db8d
SSDEEP

768:FE0iYTW6tu57znJU7DX3fuLuzY08aQTNldYPgeCgXgx:6qXunCfMuzaa+sCx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2452	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2452	AcroRd32.exe
2452	AcroRd32.exe
2452	AcroRd32.exe
2452	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\732d563f94ab87e08f793ce53efab33b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2452

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9c7b6abee1db1a933525f5a776906b4f

SHA1
fee12dc5ffb1440b51ef3a97c578ae5939b5622b

SHA256
07b0dc541a4c67c9b3b1905e6c09eab986550607c8eaf6a3baaf68d0c2fe0533

SHA512
c497315d5a949e567b8cfcda99c357707e1bb4f0e007d7e0652d3844857c0c36ea1b1185172769cd40153dcd5fd40b5ea35d9b073ec8c127636cfddbfe794542

Download Submit