8eabbf6debc3a8d52b26edd5e04ece5187ffaa3a38c9317c843d140f98459cb4 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 21:41

Sharing

Report Analysis Logs

General

Target

F13ScanApi/F13ScanApi.pdf
Size

33KB
MD5

84bc232317342e3b438cd59e4ff50298
SHA1

5c45c7a34368b353dac30d42cf36e5ed09da9522
SHA256

7c7f603542b388bf896c5089efba3386803a8d52303319d1fac1d96bde61fb37
SHA512

c36e3722afebcc87bc22076f9ac8a41c7a1e509a97cc43286f693cf5a7f58930dda825ffd186c329cbadabc3fdc0e1c8f928a6be2574f8d882d740bed25c3a52
SSDEEP

768:XS/1Jzt4m6HilC+4xp3sXnzOH/oxwcHLyxhrfJeAhnPYEWragY/aB:XkYNnGiAVryxpMWxXy

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2528	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2528	AcroRd32.exe
2528	AcroRd32.exe
2528	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\F13ScanApi\F13ScanApi.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4af26ffaeda2c1f4c0fafa0657ce6323

SHA1
71f3564a400a65317c8dba0055be1a21a5e0fe98

SHA256
899a7bb84009f5cb54be238854a9363e9783a0c37af30dcf83eee16a00943fa2

SHA512
90fcf17c01646baebefc4b5260dacf6bbf55d7749b6b3c313bb9452d7dd94135c9b4b9060d30bbcf552439d30ab9d03da821e5ffc322b966b04585536c0c77ac

Download Submit