bc13c13d7e706696b03963210fe7cc5f331f530b448c57a2023040049ab9bf63 | Triage

Analysis

max time kernel
118s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 08:50

Sharing

Report Analysis Logs

General

Target

7ec4d0b19d42e271f503f561bc012f09.pdf
Size

34KB
MD5

7ec4d0b19d42e271f503f561bc012f09
SHA1

fcef653801e0fbc6ca919d32ff4d7f80fd42c1cf
SHA256

bc13c13d7e706696b03963210fe7cc5f331f530b448c57a2023040049ab9bf63
SHA512

704a0c7a65b3bda434ab2f1ec7080e5f63ecd3a6bd926f23491ec1d168d36b3df1763367297fe2efbb9e6aedefbd3905917e4739df3184c57951b88bb1b6be7a
SSDEEP

768:JnyVh3+X6qDsOcneVgiXTbZL8yncM21CcHsOpM+:JyVhjqKnAgiXK4cx1/HrpM+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2012	AcroRd32.exe
2012	AcroRd32.exe
2012	AcroRd32.exe
2012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ec4d0b19d42e271f503f561bc012f09.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
44be186b5f1d8469eefcd5ead1bfd62c

SHA1
36bb54106ff561dc2cbf479e01007a81b476f657

SHA256
6eb7acf7c2a8e35c8d90fcae6aeffcdaf96206e7706e9c0f895bcb4e5ae5e10b

SHA512
118165fb79ec9e897c7442d94ae4814c0afe7ac6553197955c036c0a3e5c04eb91a1e041804cba020b717b96311908508fc405d54c12b5c12fbba0269ee458e2

Download Submit