e418f56b149eaac50e6caacb7bb01f43da16565a25a3daa68c731d6c88b437f9 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 15:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

de0696cd98e6bc229838df746315dd0e.pdf
Size

68KB
MD5

de0696cd98e6bc229838df746315dd0e
SHA1

23d11921f35c7a18877862434c182655b079d77a
SHA256

e418f56b149eaac50e6caacb7bb01f43da16565a25a3daa68c731d6c88b437f9
SHA512

81f397066e3b30f5b38f07962d3949243b5a287eab0f17d59fd01ee346778d7a21690de98151e7419c307bebd81b8c49d12e6581fbba933e408e8752c041e114
SSDEEP

1536:ZEI4DHrcj0h2iK/KjprOaM3ZR1hI73PNmnk/ey:pmc4htKS5OaMJRM7lU3y

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2012	AcroRd32.exe
2012	AcroRd32.exe
2012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\de0696cd98e6bc229838df746315dd0e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f17e37f24a0a7b5518f2e169a6b6f115

SHA1
d1fe97f294cec205c0f0668e0d87ffa7e0d738fe

SHA256
359c1384c59e0797becb27c1424f913ee8c552f931b1d5a8af04b4bf75309762

SHA512
741b4ff0e87b764c83d0cf1b2591f9d91b280f2fc691cae44e905c8cfa336bf3e0401182c4e27318535e4c8c1f47e75c5fb308c5d4c4f4c800441b7e9957f8a7

Download Submit