6f0495900c5d0f99dd1e274393286f618d0409fb02722a50500601bc69d2fb52 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 13:57

Sharing

Report Analysis Logs

General

Target

b2df515cc715f04c9cb184a93e3f0a38.pdf
Size

66KB
MD5

b2df515cc715f04c9cb184a93e3f0a38
SHA1

9aa45e4fe10eb1b8ccb3277e86e6b57db5157846
SHA256

6f0495900c5d0f99dd1e274393286f618d0409fb02722a50500601bc69d2fb52
SHA512

9aa616604b440785a6ee7cb93723166c6c1508156e86cafe11dd0b26b83ae1e532136449db56a29da796edc9f4432b0c861edc849f13332c8fe695bc22164803
SSDEEP

1536:h76PDpOSw2VF68nCRXnUGQc/FkN5ilFWrA8:B0NzwAF6MCRXnUjc/FkNElFW7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2380	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2380	AcroRd32.exe
2380	AcroRd32.exe
2380	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b2df515cc715f04c9cb184a93e3f0a38.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d0404da0a2748a9384827fbce9017ab5

SHA1
59994303e27e58a01ad95cef4a34eacdf97224a3

SHA256
54819fc9812c7d35f8646a1af75335af08a882d06b89761cf72bda454b862cc8

SHA512
1e54644cdc58485b2753389f91402503c2614b4ccb232a118f71e01a75936e5dfab5aa6e19cd5e4ab1b2d55963f2e30328956303ebe506dd0f3315d6a57c1f63

Download Submit