d088fe604d60044a20088c0e02209ea8749b5307da7656b28f959361bc97a11b | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 17:21

Sharing

Report Analysis Logs

General

Target

ffe2d929599b1f0acdb9a41f9203f870.pdf
Size

35KB
MD5

ffe2d929599b1f0acdb9a41f9203f870
SHA1

a9f8231690e669ce9264f283761d1368dcc4c330
SHA256

d088fe604d60044a20088c0e02209ea8749b5307da7656b28f959361bc97a11b
SHA512

80fe7ccdb26deb8f57abbe24b4a52160256aa7fcef0d9fea43c83d8d48803c596eddbaa8c165c1a41cfb948460ca4a877848c068306959ebe7cea50ef5966329
SSDEEP

768:HvUp861FNsQaqgpLLUI1IZk3txUxS0/cdY3YSw7Q:HsPDgxduotx08YISH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffe2d929599b1f0acdb9a41f9203f870.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
48b4361a33f4410eb91120161cdaccd6

SHA1
c84278a18b4a7ac3643c198cb8e8c4c1b3733456

SHA256
95a9d0d025d173c3bb5982ba69e05d85664e6e8e49bf1c46d8a41c4769427588

SHA512
8a83a217326e5aa67b2b6a5ef97f5c67ff258ad13a1d61247518a531c082c8c05ad69229a84b5c61705ca4e85dac9b4569aa110e34662bf41cc5063d034c97e3

Download Submit