45fb4d7d8e680246d13706fee9c27400505caf60838861be859cccb0e3b26baf | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 15:20

Sharing

Report Analysis Logs

General

Target

d7fe82cb4ff8fe7847d9e0c70df84bab.pdf
Size

34KB
MD5

d7fe82cb4ff8fe7847d9e0c70df84bab
SHA1

e593f4085d302a455908df23c6a295dae91126a1
SHA256

45fb4d7d8e680246d13706fee9c27400505caf60838861be859cccb0e3b26baf
SHA512

560f508262c20d53268df2f4175d7049d0b64c69ba5b1fbb222f3bf5b78ff9e2433c8d7f1398485fa3e74693760c59d1304849559c1af97bb62777c8a2dcdfaf
SSDEEP

768:dC7+sMXqiKlK7IlBW8dCWFsqohtllOo7gKDLU:w7sKRFxRohTdDLU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
816	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
816	AcroRd32.exe
816	AcroRd32.exe
816	AcroRd32.exe
816	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d7fe82cb4ff8fe7847d9e0c70df84bab.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
44be85474919d74b63bbc9e99710fa7f

SHA1
e0e05d1c606c97f88469ba07a8d3e5e0f0bc2dc6

SHA256
fb13ecdb0492a34789cd15236517b29f84acb1042f454493f20db5c1ac85c4f8

SHA512
d52b8620160535a326c46b70b051d25374b67fe3fd5bb9090ce1ea83d7d41a0ce4c017ff35ec563cd223282c1bc7527ddde9db1a23edc0849b7492a5e2d5365a

Download Submit