32bd08fb2ec6fc613f5a5bb57fbc1767f514a1baa1a303a4f7fb5587740f5ce7 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 12:53

Sharing

Report Analysis Logs

General

Target

90d5fac5ae42418bc03dc0a639f7c360.pdf
Size

48KB
MD5

90d5fac5ae42418bc03dc0a639f7c360
SHA1

460b0afc401ddbee8d9fe073961e14d7cedde8d4
SHA256

32bd08fb2ec6fc613f5a5bb57fbc1767f514a1baa1a303a4f7fb5587740f5ce7
SHA512

c02b1d3f119847d8a074d19ce81ede9cc4e7fe29512d8a3bb372f724ace4964c23be942ba2585ce51f64c788f0d1d1ed8f5645c2972db23f2a95178e2fa70cab
SSDEEP

1536:TjIpLN1PfRHfw0qSMkFo0wOvE0jjGKdQR:XIRnRHfr1MkFo5OvTSKdQR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2128	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\90d5fac5ae42418bc03dc0a639f7c360.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
81225b121dc50052371c947791e529d6

SHA1
e7a5b1a4120073e103c830d01b3cd1d8144102cd

SHA256
3b88a4e0c4fe18ea97289c1e0cc4d3f556163ceed86ba122b529e500dcd2c2e5

SHA512
1483060bd29a82045d7333ee4bdf1eb32e63235cbacc5b175a796272f9c2ff4367cff540839d9289b3c5c13c81be32ddd2a0422ff958e93f8eb7498e26548739

Download Submit