78b898427d29a16f18e0da45e3f12102030f5e55e27aceb146ba431c3e2dee59 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 02:59

Sharing

Report Analysis Logs

General

Target

016f9e61af917b5c50d5238b1db969f8.pdf
Size

117KB
MD5

016f9e61af917b5c50d5238b1db969f8
SHA1

7d8ab2a3be719948882f37c4c84faddd1865d0f9
SHA256

78b898427d29a16f18e0da45e3f12102030f5e55e27aceb146ba431c3e2dee59
SHA512

ff758397bc30c7d702246678656ea5b462c7ef3bd763d56b0041d0f53ce639cc60cce21e2bfca4c36405806a6457e2609f3f03c4d76f2769530c477fabfbfc32
SSDEEP

3072:lWRa0nHSasmaYEoJHFektd91ny6hqRiTr1UtSXsCD:l6HS2OmHb1nynY6y

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2132	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2132	AcroRd32.exe
2132	AcroRd32.exe
2132	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\016f9e61af917b5c50d5238b1db969f8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
863bb531e9e1a3dac3514c1f2fc72adc

SHA1
59e0482e8a34b5134487d8974f175765e23493aa

SHA256
3925ab7f89ddc4a4004d3df03d392b7605c18f1cad4d25f3c37722234fd014f3

SHA512
1ee2e784887f33b172a0461617053d75dbca421b1bf5028f3d2cc9793c6910571e5871557259ba9cfd0968347f0f7383e8dd9d4b66c9b7c60ed638f2abed68e7

Download Submit