90c611a4577787bd88b1ee4e4c7f86c0c7b939db63dbf64f8f89ed55bfe18a42 | Triage

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 12:48

Sharing

Report Analysis Logs

General

Target

8e76ff9389c247acdb5dff48c2c433c3.pdf
Size

34KB
MD5

8e76ff9389c247acdb5dff48c2c433c3
SHA1

3da51e919d528e9fe2abb4872d8e31257df59209
SHA256

90c611a4577787bd88b1ee4e4c7f86c0c7b939db63dbf64f8f89ed55bfe18a42
SHA512

de6cb07ee09da97f7c9ff4ed3d22b2fa00173d2aaee760dc76a9eff9423f6559d9c14d8ea99e4e7a1df83bce5356ed5d7e7133055ebb251e6dddcf98d2a66e57
SSDEEP

768:htDFsTk1tJIyZzUVRFXvJNUr6KCEVslaB:ztIyZzYXfJ+6KCEVoaB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2264	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e76ff9389c247acdb5dff48c2c433c3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e90c1f22fa256ff9248b4155b6e33677

SHA1
2fa123e689ad77db7fce53c88ede352e74aee362

SHA256
6b7b72f4b50d1a6f5d0cbb0758942b8acd59937947ee4945e4929c1fc6baa43d

SHA512
0377d3981f7897222fc61901a5a6134b46c1967a233b2daa11a17ad0d1af3056512b6f2ac1ff326aa123f07314cbd9a0fdc66dffae0e4df11783cd37171f7352

Download Submit