205f2e24c8d819f248388583f06cc416d938f4cae93820f09c693bb38c462116 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 03:21

Sharing

Report Analysis Logs

General

Target

02a93b64d040dc079ce37f2170b16ca3.pdf
Size

228KB
MD5

02a93b64d040dc079ce37f2170b16ca3
SHA1

e78ea23109b7b641c44deba0aa82e98e28630c44
SHA256

205f2e24c8d819f248388583f06cc416d938f4cae93820f09c693bb38c462116
SHA512

e776ec80afc20777b9a43854a7e9e9baf2633d434e4f99b7581b87f616bf41883b24954cd87b350e77237a409763239898afef1b8f6954c3aa1887e4643c3e63
SSDEEP

6144:uC0lje01RpfVaLXG0ZIlKoFsajSAtOUaiRm+J+O0Knno:Mk0rp9aFelBXpo6Lo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2100	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2100	AcroRd32.exe
2100	AcroRd32.exe
2100	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02a93b64d040dc079ce37f2170b16ca3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
18c88df795c30cf539e15ba019a278f2

SHA1
76cdc3c1d58ec132483f46db03e604f8d0779543

SHA256
a3b6f9b252095ed716fa55e6afb2917711928598cb2ffad400534682bd8e6636

SHA512
e878d49a02e37d460e67e12a14955660f7000100d1ade29cab96dab08636aadf2b1a8de814dd8440bd42cfac26414fca0c92051059d519f63a42753fc21870d1

Download Submit