a0a243487fe615a000fe5799f9207203fe76064906704aa99dd10e67bf14292c | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 13:32

Sharing

Report Analysis Logs

General

Target

a522b24553906d5422ef521fa002dbdb.pdf
Size

75KB
MD5

a522b24553906d5422ef521fa002dbdb
SHA1

3cc3391dfb70b923b90ebc7b709323624c7fe8cf
SHA256

a0a243487fe615a000fe5799f9207203fe76064906704aa99dd10e67bf14292c
SHA512

aca3e3497437b50ef182920aa8279b098222c3d345c9726fddbfdda33d6bb9e935413b7e7434e56a1691aa0b1007ac4c3a2bc5fdca8878e4fbef9534318e5953
SSDEEP

1536:D2Eia6kBLdevMGbuXjPRZ2WJBDwpt7gWOpOaZG6rzy:l/jpMRbuXbH5cr79aZ5S

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a522b24553906d5422ef521fa002dbdb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
13617f792afab2cd90090653068dd13b

SHA1
ff2e81a90973a2fc1638fdb5e59e000b7dd09e98

SHA256
ab94647b11d301204e48a09fe80f82391c0c9091d272a7de96394f69a62df1a6

SHA512
d1401c8d89f0c731b766cea29f315cf68c7e91e8376078980d0e47e8ca334e3825f74688699bc735ac952d1a85130c3522895ad1018f04d532c8423065a9fb17

Download Submit