82da96643c8a2fe8a6c9b0b13bae29731291e5047b99b0c38501b9d0fe24eca8 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 12:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

94415511b94f0d052b541d03cfdcbcba.pdf
Size

97KB
MD5

94415511b94f0d052b541d03cfdcbcba
SHA1

093d038cc453706c986009e8113fb257445afe3f
SHA256

82da96643c8a2fe8a6c9b0b13bae29731291e5047b99b0c38501b9d0fe24eca8
SHA512

65358a8c82d5cb8e9487798f8d89cfbff93a18e320ceae0ed755a63265472157e06249eec52b5d4a5461be1a9d733675563dcf206130e3735a0178657c1f3c70
SSDEEP

3072:k2E17TFgtKU6oAWIX27y6etdmMG7QgMKm:k2cgtKNtWmP/V

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2248	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\94415511b94f0d052b541d03cfdcbcba.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f2df331a91fbe1845eeb260d1afc342

SHA1
530ed223cbce7d8f65d7c6fd94d0499170ab3356

SHA256
83a97b625a1094661c86ae440e13c4f539d8cbd928a6ce6f283f1905e8112a8b

SHA512
389f3783e0aed3c4cbe31e4f4873451d04c8cd867c4d8684d146cee34c070b5e5bb79b36a8f40c548561a745ad76cd9317c755695d918e1a92aca73e73c38456

Download Submit