24e7e914c8c0303457423ddb7bbaf47a1f216115fde3fb444d70dabe634ccf21 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 12:55

Sharing

Report Analysis Logs

General

Target

91e7dd014be2062576788ac3201a1727.pdf
Size

72KB
MD5

91e7dd014be2062576788ac3201a1727
SHA1

53410d808bf2b344de9e36f695721667b5a24bd8
SHA256

24e7e914c8c0303457423ddb7bbaf47a1f216115fde3fb444d70dabe634ccf21
SHA512

aee167289960aa3a0880a3d78a62d5da008214ae32936e72ae111993a35f2e6ba56c3e7c0d228589eec42c4481e5f9b4182dd17546bcf66f06f3565f1e68adec
SSDEEP

1536:jwPW9I/tau0OpGtMafuO0r4lZ105HPGvBo6Y+kUoC:k5EuBOZ5hY+kQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2400	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2400	AcroRd32.exe
2400	AcroRd32.exe
2400	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91e7dd014be2062576788ac3201a1727.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
283829898f23ef8c60a18e544c091d7a

SHA1
9f265a6d6e0ca27399e3a95d9edbb57e585d14c7

SHA256
66d713f380803115414fa4c5a8a8342a5e3797e814283be7ef0ee1826e4c20a2

SHA512
717ff4fb327a2c21ab1942fa9f3c17fa86e2b8cd3b0c9ec1b5853896581cb66f03124505be7a8ee5e0497baa93cd58648deb32b96c4104482136c3869d918221

Download Submit