a9e527a1402ac5a02930486b99ba2b2cda0ac64504a56739d5b37ab1cf614073 | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 22:19

Sharing

Report Analysis Logs

General

Target

153b086195078ef74f95fa55409b50d8.pdf
Size

128KB
MD5

153b086195078ef74f95fa55409b50d8
SHA1

16df959c585c2ac410152583a3366d3527af0646
SHA256

a9e527a1402ac5a02930486b99ba2b2cda0ac64504a56739d5b37ab1cf614073
SHA512

7fd0b08a322e5f61ca00c62f400b158a727f7b1c59da490606abb93723fddce666467fe69670973ccb21299995598ad5ac0e3965809a1d8b585d865c146c782b
SSDEEP

3072:WCuas0sb0XmrF2wEETZpXduo6zL/90KYK1LQnvsVQXZ:Oa9sbtP1Fdq8cdVa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2104	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2104	AcroRd32.exe
2104	AcroRd32.exe
2104	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\153b086195078ef74f95fa55409b50d8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0ff4b2c5990cd9a4b64db496f8d63219

SHA1
626552954747e369942d7a5ff9071e424a1de121

SHA256
979af9a19381c9caf5a82f31ca601c17f3df082e40dc512a691538e12bfea6c2

SHA512
ce7c6d7853ab9263775e326a4e1d41442805468854210e63b5704271c013fdbb853d6e7466000871e7ca55e618f6e55c04cb733f0a81a2e45d8a1ca530ea38fb

Download Submit