6b2066bba4ff261a18ac785787ac6be55cc8a7344653853ba7209c9e8f678016 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 14:51

Sharing

Report Analysis Logs

General

Target

cd7063d9fd01fcc2c29429a26c6dbd83.pdf
Size

34KB
MD5

cd7063d9fd01fcc2c29429a26c6dbd83
SHA1

6da1d7848c047e0d594e1cdfd01512d79aa0f420
SHA256

6b2066bba4ff261a18ac785787ac6be55cc8a7344653853ba7209c9e8f678016
SHA512

882d7ebaff9de23544b15deaab9b656abec6af7583550e2aa9c48087fcbc3cb31175a064182926eb74493f8b00197194f657ca6969fd7f8e79336f033f449358
SSDEEP

768:KtPlgOgs2rz2ag/L0FFR4fjHO0y4ltzfxkr:K9lnfTYFjgjH3yQfxkr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1232	AcroRd32.exe
1232	AcroRd32.exe
1232	AcroRd32.exe
1232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cd7063d9fd01fcc2c29429a26c6dbd83.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8603dba8f4c644ece5bd776f600f10b6

SHA1
d51c8cac655d099a0d0cddcf6d35440cec7b9861

SHA256
b333d90f8c7c99f74a25acf792bef6cf7e2489eb75673f9bacaf87d7077ca3dd

SHA512
9898787450f32269d45a57ad6739d4d3afe1059eef665ff55fe342378ac14ce9bc122804ebd3e9f9fc0d2ff8a71320ff39591462c895387e326c777227a64bd8

Download Submit