2e7702572e34d2343a3cf6d452a38b9b5ad3c91e2db075c2e784d79f266c997a | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 13:48

Sharing

Report Analysis Logs

General

Target

adf9a642a74eaaafb7db3c0a6c5bee81.pdf
Size

34KB
MD5

adf9a642a74eaaafb7db3c0a6c5bee81
SHA1

1eacbbd8b6cf0e4c1c662c2637e2c64f5472e6dc
SHA256

2e7702572e34d2343a3cf6d452a38b9b5ad3c91e2db075c2e784d79f266c997a
SHA512

af9494ccf328cf420418541887714c504fa109ae15f04ab67c769e6f5468932656724f928a8590588808e409362217c80639cbfc1497448fbca8edc5df7f0855
SSDEEP

768:4fspuaxn95lsxAgn0Z3ZldG4v2R1WZtnvaoNWK:rpuK9Pg0eZ1WzJNWK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3052	AcroRd32.exe
3052	AcroRd32.exe
3052	AcroRd32.exe
3052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\adf9a642a74eaaafb7db3c0a6c5bee81.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1026537834b17c3b534f1f22b1aa8419

SHA1
daef1c2691748a33bd205efc86e34b2f48e2fba5

SHA256
8db121e1b0dbc238a308fd41239e973baa3ba327236b5ddc50bad000f98a59fe

SHA512
203327314e284cd7b933b316db972ff87f11dbc955292adde23d3ee7dc9651f441ae2cd8b6237ecfc799957c04077b37bd415201a02855de26420fbd072c0df2

Download Submit