722ae47a1ee21306edd6b56f3ccce81088ac74346c6559ef2d7cb403348fd6b8 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b868907cee01e01df1cd9b51b46d0608.pdf
Size

34KB
MD5

b868907cee01e01df1cd9b51b46d0608
SHA1

3c422c0fb32d3818719413b0ed45f3b8da2746e0
SHA256

722ae47a1ee21306edd6b56f3ccce81088ac74346c6559ef2d7cb403348fd6b8
SHA512

49406bddf1225122b2678d1a5573f27b76fe0a17935782fffe98023ffd507c602fd31629ca85778b309c59e9d338619670e1888c3e851bac48d3e9675ab62b5c
SSDEEP

768:/Uwloykn49Gzwf4cez9V1a0tZDEaE2FGM7u279ZI:sHF49GzwInw2FGKuq9q

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1544	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1544	AcroRd32.exe
1544	AcroRd32.exe
1544	AcroRd32.exe
1544	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b868907cee01e01df1cd9b51b46d0608.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1544

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dd32f2c928991f3ab1143083186db98e

SHA1
6b0a1e96a821febbd81931381725146326cdbce1

SHA256
72059ee86c436474533ec9c9f332f535b67212cdc24004189894b19e0c8a39f2

SHA512
55be2954f657c8e231084ee5d82d81ea7fb2bd9baf81e23fb4f04dc4de4a6f8d3836293353914cfd5b1ff2f5c3b97e8de00b4557a11cae00493239749fb9928a

Download Submit