00c296b2e2429a9eaa4579953352114c041e7e53c9aa8c173bcafbdc1a8a8c02 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 00:57

Sharing

Report Analysis Logs

General

Target

1eaaedce0ac042fa498d783a0c856e0f.pdf
Size

32KB
MD5

1eaaedce0ac042fa498d783a0c856e0f
SHA1

61b8825a5f0c31e05c5dc3de8832e27fd0af2c40
SHA256

00c296b2e2429a9eaa4579953352114c041e7e53c9aa8c173bcafbdc1a8a8c02
SHA512

373cf3178fd7230ecbd12eb45605916dc07a591bf97d55ac7252a9f92a65c6820170b1f93f7e32a96b8bc54962847c648ed6d034f994f86a83448ab0da936862
SSDEEP

768:EgGzpDDoeNxb7D1k6rSpylO3lQ76lO+T57+c05AA5Om:xGFPvkylO3uEVF+c0T

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2864	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2864	AcroRd32.exe
2864	AcroRd32.exe
2864	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1eaaedce0ac042fa498d783a0c856e0f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
184b1b12f236267c8acc99349aa48246

SHA1
4f76208e3e93b48a8ec5abbd3e65b509f8b98da0

SHA256
8a27b9db57c21208596f5b23d85bb5650e966729c90b2375d523113db37f41d9

SHA512
786a7ac94baf68d4b4a1c87324965714f00259c7ea63f8b5f63bed18f919ac641e409e18329611a307d576a5bc821c16cc7f83935c33a7cf0c7b550428b222a2

Download Submit