a10dea8f77483b89fd9ceadfa5283c7d36b34069442e21f050e32f220ce667f9 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 11:32

Sharing

Report Analysis Logs

General

Target

88b9c225f01d00e81c216ef0305091bd.pdf
Size

32KB
MD5

88b9c225f01d00e81c216ef0305091bd
SHA1

1ade6832fa60b0c3db0d565f5e7bad72258f786c
SHA256

a10dea8f77483b89fd9ceadfa5283c7d36b34069442e21f050e32f220ce667f9
SHA512

3a6c37208bec142fcfc038b998169a10a1994cdb2becab9d7012b9c3f245184f0ba50d2123f188c91f60acca107f62014d53374d7a030e794b309ef0bd026b28
SSDEEP

768:CbOmDib3QXHCdMV18BQyKLdH05m5GA0+OKztbnHIn:C6mIAyq18BQPNZwKxHIn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1644	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1644	AcroRd32.exe
1644	AcroRd32.exe
1644	AcroRd32.exe
1644	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88b9c225f01d00e81c216ef0305091bd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
850f1e3d3762406385cadc28efdf2e16

SHA1
c48b4bff13bfa8eb7ce088337da530e6d89c7ee0

SHA256
d066bd311ec69107f955a149ece38edfaa3978bd106f7666af8409742285f6cf

SHA512
48c3f79beef6d9b9ead46cfb15b776a2e261589380143e6320cd067d9622d9ae08811cd3d82df7fa0358535c9bb6c0756ec8f63c4b6fd795487804cf1ea716d0

Download Submit