5d59b1dd7308b88613e9d021e69e70b1893ea27c4fd40d1a80fae5c59ed043f6 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 15:17

Sharing

Report Analysis Logs

General

Target

d6a6384966c074fb8ee2f1f76a3622b6.pdf
Size

99KB
MD5

d6a6384966c074fb8ee2f1f76a3622b6
SHA1

799ed8e1959944b8f867d19be8a4b832ec3ee099
SHA256

5d59b1dd7308b88613e9d021e69e70b1893ea27c4fd40d1a80fae5c59ed043f6
SHA512

0f6290cde0f64cc9f7f5ce9dd6631d84b6b15532717d3add1e68559637c758ec72562977335cd8b83a2ccc056cb11d5f2fef7e4fa699fea7a595e4aa35dddb90
SSDEEP

3072:pKtBNeGjo837BgwaZuzKeVD4JJ/PmpXZfhmn:gTek5iZ+V0Jgppm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2408	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2408	AcroRd32.exe
2408	AcroRd32.exe
2408	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d6a6384966c074fb8ee2f1f76a3622b6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
230524f7410fa75fd6b2d538aa00cc7e

SHA1
77a08d7438ff8f7219eeb5533e7e0536dc03a316

SHA256
1ab714e3b69f128019c8eecf35a7d93fd661dfd5fd4fe91d895ff87464635cf7

SHA512
12455f992f6399ac7ec99b66ccebdcbcb9d27db1cda8813271bcbb84a68b22be8f7d22d5e7ea2995151aafc1dd2bf02d4e012d7a22fe05a9b6ed228e22612a52

Download Submit