5468e715938b23154a9d7ed3115cd424eb62c8fa792fec19dc1b2b1c96873cd9 | Triage

Analysis

max time kernel
117s
max time network
131s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 14:16

Sharing

Report Analysis Logs

General

Target

bcbf0cc23cef6397b60c13dc480168f3.pdf
Size

35KB
MD5

bcbf0cc23cef6397b60c13dc480168f3
SHA1

c993ca5a7b6f5f63b8ceb4e0e813f7bfb1255d6b
SHA256

5468e715938b23154a9d7ed3115cd424eb62c8fa792fec19dc1b2b1c96873cd9
SHA512

0d34e1aaa9f54af70b150942c6236d10442cf7b52e3f0418bf1750bf958a3ab3743474e85610a737cbab5de9756762f50b1d3b24ba45db593e980321e7fbf66d
SSDEEP

768:2JHTmVNBv9+/Nc9ouQCodaAbhCzncpqcR0QesYEv:Im+N7uzOnsbcpXiQezEv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2240	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\bcbf0cc23cef6397b60c13dc480168f3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6ae7e4b478a20d0d074d9a0fcea8456d

SHA1
02892cd220d321206277dc069d868b322e67c78d

SHA256
2ff388bb54fb8246d817fb275babb05add657c9cb383d7d363165d10550570fd

SHA512
969e9aa133d20997e8e1a91f22f946f4a5553cd7f5d5d6381916d5885289b90ee56055642aa6efde01c97a651313cc448413dafb2b01cd33d247d4b4fcf307b4

Download Submit