585f19476f318deec4e1a6f7af5c4d0a71b92cb321773d9a2fdb2a56f0f401fa | Triage

Analysis

max time kernel
122s
max time network
138s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 07:12

Sharing

Report Analysis Logs

General

Target

77e22634fd0480a38ac2d65b1b084448.pdf
Size

35KB
MD5

77e22634fd0480a38ac2d65b1b084448
SHA1

7eb0023467b7f4a0b9c1200f156bc9e13c3bd1ff
SHA256

585f19476f318deec4e1a6f7af5c4d0a71b92cb321773d9a2fdb2a56f0f401fa
SHA512

9d17b29d07095d0fe46a78f46643ddf5f5a4af82e1e55216931b8da5679ac8541c0930d53a093f33b930416b8b3f8fcb7ac46df3bcd5809edcedc6dd8afed4cf
SSDEEP

768:sV/MRf0cRUJHsCvBF2tddDv6R6B7nZ+dB0k1KYd4Vl1t:4/MRMlruv+J1ld+l1t

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2944	AcroRd32.exe
2944	AcroRd32.exe
2944	AcroRd32.exe
2944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77e22634fd0480a38ac2d65b1b084448.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e9a59ce9f856a9fd0536ceef25321ba3

SHA1
35c5ae691b72a41393dcfd5e4af0aa6a41f4c62b

SHA256
5bdde078735214cf9c06abcc8e7826c852af86ae9f1d4ed28378450fad6f6061

SHA512
b7725aa5bcc1496c9fbb1d5705b55c39083ad78e16c2afb04878f3f06a012e7f3e7b540051b51303d9885ded6244a28cf1f37e53126dd07deebcef9352eb7298

Download Submit