65b62a36fba34fb4585ecc0cc4e56b074e7dbb72e424d68fd4ee6e0c8990de37 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 07:34

Sharing

Report Analysis Logs

General

Target

79e7425966638ddc75c5bbea368c01b2.pdf
Size

34KB
MD5

79e7425966638ddc75c5bbea368c01b2
SHA1

3f44b155f03701d6b57d948d22f4beae345d1ef7
SHA256

65b62a36fba34fb4585ecc0cc4e56b074e7dbb72e424d68fd4ee6e0c8990de37
SHA512

7def64bd52a4bdf23e3bc9677ac48256885ddfd831ee488d700a049ac5968d717bc5092431c740ab116d4f543d97cbd5019fbcf3a116ee9a08f6a02e0b4db424
SSDEEP

768:6EH7JlJUA/vJGbjaH6ZmNbCJF35gJiJEocnF:6g7JlWMeaHMnJgJoEocnF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2096	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2096	AcroRd32.exe
2096	AcroRd32.exe
2096	AcroRd32.exe
2096	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\79e7425966638ddc75c5bbea368c01b2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
57075611c63fbf35d2e9bac6a693386e

SHA1
69617d8cbea5c659e7d9489a5a17a1042de1d094

SHA256
da212a3af1efd8475779328e2c56e5473ef0bc99c1e0c05fea4485fa2f128d30

SHA512
fdf124c989956ff6d66438fac61497a9f3f44174fa22fa2dc54cbb2f08e6a007537b015b5af70f59ac780fd4d57ab37780d2df294c731f5b34534d2ca7deb18e

Download Submit