dcf35cd41146034fd8271eeb0ef3d3cab1402498e8d83c48b39d110a3c9f38b0 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
22-12-2023 16:12

Sharing

Report Analysis Logs

General

Target

eb4f4e184a8d52be968c6a8858498378.pdf
Size

34KB
MD5

eb4f4e184a8d52be968c6a8858498378
SHA1

dc1acad59314bb89d86db848e6b4d717864e9fe4
SHA256

dcf35cd41146034fd8271eeb0ef3d3cab1402498e8d83c48b39d110a3c9f38b0
SHA512

230d96a73bae1608731ef9c68e183ea5c63f56e0e7090bdf8a2a63623df50b2a8385607e0e968453f2ce5d851305cb66275e0bf58bf8e31a04cff2dca58604ef
SSDEEP

768:ZnOzX3E/Ksg7JMhRHKXl3rCtojl8t63y5K:ozX3sw7JMuXRrC8t3y5K

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1328	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1328	AcroRd32.exe
1328	AcroRd32.exe
1328	AcroRd32.exe
1328	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eb4f4e184a8d52be968c6a8858498378.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1328

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ecf8e25e238b37d05cd63dfdcfb26b0c

SHA1
b9bb777792ade3f19c16eb0b21494a824ed651a3

SHA256
de0672d899efd429fae992d46fcbcd669eeb8fc507627f814c02bee68d804674

SHA512
7214a73db4ae6a812e9ce1e5b362e3aa0951840f64f1f8bea7497f86291231c2c011bec23a6da3931c831b8052542a3d0637dd383d8b3eb34fa6d76f5eb3d303

Download Submit