d83ea0865bf2b4030dc0a675c18a754956cbb8e04033d64dee7c28c1f1d54a2a | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 16:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f6fd3d022529d1e7eaf7910dd78e85c5.pdf
Size

34KB
MD5

f6fd3d022529d1e7eaf7910dd78e85c5
SHA1

c5efe13860ff3627424fbfe649918221eeba29bc
SHA256

d83ea0865bf2b4030dc0a675c18a754956cbb8e04033d64dee7c28c1f1d54a2a
SHA512

9002eb4f4f490fab1d26db44fa1c4a8f980abdf512b90ad9f2883328a64b4cbbf700004e5de25794da27e9eb869ba81eb9914bd056c0061a6ee6e3051b521215
SSDEEP

768:YhfAste04/sFaFGXaVRfLf6JN1Ouyh3emvdOf4SS1ok:6NtmBtSN1Vi3td1SS1ok

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1800	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1800	AcroRd32.exe
1800	AcroRd32.exe
1800	AcroRd32.exe
1800	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f6fd3d022529d1e7eaf7910dd78e85c5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7926e367d430e8a385becdd40b9ef833

SHA1
8ff13806408b543d3452e27d8b6624c280be1234

SHA256
0a64425f5c2505be6af6003b1decb978c0600565afd71fc515271094159f6df9

SHA512
048ede29dd2e1f1a89e1cf1443f0cc690511727a1e3ee783cff3c3ce9e98bc20fbb4cffbcff3bda11b41f06778b5a4243b885714683f4d613eae6d7cf0a3e7d2

Download Submit