2bc670682003898cc626e45f56970c83449619906c128554393291ed72eefe31 | Triage

Analysis

max time kernel
121s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 06:58

Sharing

Report Analysis Logs

General

Target

76f9dbfc4ec8341f62a49fb40c130309.pdf
Size

33KB
MD5

76f9dbfc4ec8341f62a49fb40c130309
SHA1

44c6c09d11e1d67a0dc7df481e7f454415963cd4
SHA256

2bc670682003898cc626e45f56970c83449619906c128554393291ed72eefe31
SHA512

a3b18322e50685bf213d04d8fffb8e583bec0d7ab0e7bfa9b94abc91f60fc5b2419b6daa81032de24477822b0dae6308b01dfdcf771a69d680732458acd28c55
SSDEEP

768:z1tvx5+swQHm32eHKwytqwJ5YPykxPAT5Bc5dly:P3pY2e5ytTJ5xsAT5kdly

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76f9dbfc4ec8341f62a49fb40c130309.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
211a67c15333b92091d82601de2cc3ec

SHA1
e1c96bdbd5496a44902e468e2755487f925c18e4

SHA256
1542f529a33be4be81f3a09acc18f0ae97e0a2c8fd17c2ca93904ba5eaa4e41f

SHA512
789a568428cada7e45b1f2009a681604ceb595a70e5da13bca5119b942a23a7b1902cf110824018c427daf11745e5e9c0745d48872fbdcfe06d0cea7e32e3131

Download Submit