a5b75d95ca07210e831574d52ec38a01a02193cf40178439fcdf840fa5807cf4 | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 12:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8e0b40b36494872c8810718207ecf0e8.pdf
Size

34KB
MD5

8e0b40b36494872c8810718207ecf0e8
SHA1

f8b0fb11847f255cd881cd6037aec32482befafe
SHA256

a5b75d95ca07210e831574d52ec38a01a02193cf40178439fcdf840fa5807cf4
SHA512

96648f0b2357bd2e9fb9945e43811775710940567916d10198e62bb3372299e6394acbdeb7c488b5b170995b0a3395ad7effa876f96d35636ee013506d6e4c34
SSDEEP

768:Mn+pUjP0PsKrfUXMCtwZGilX0E6BvWeRx9:MRcXSQx5Zi+ox9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2960	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2960	AcroRd32.exe
2960	AcroRd32.exe
2960	AcroRd32.exe
2960	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e0b40b36494872c8810718207ecf0e8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
07207e74360301d266547f76c057b31b

SHA1
4fbd2a5b531ba9290c48bb8536e80e56b4568529

SHA256
cc6732146b6b06e9a221fdf5fef1e204524ce6aa852317f025690f0b3d78faa7

SHA512
f25ff7159f3d49e7b20574ba7ea036ec19222da9bb7d458a58a7c0858bcfd91fd401435e041a9bc84af395e3b3f11fae3d4995ed0fd6dbd664646222700a437f

Download Submit