d540ee1b6f0fad6164ce68c4667e2a7a5a83082964a97222fbd6115045452b45 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 10:16

Sharing

Report Analysis Logs

General

Target

1684d03b7b67ec0bbd56b2d5f5b4f707.pdf
Size

99KB
MD5

1684d03b7b67ec0bbd56b2d5f5b4f707
SHA1

e19c413a66066d313364bd56968dcccac8f14127
SHA256

d540ee1b6f0fad6164ce68c4667e2a7a5a83082964a97222fbd6115045452b45
SHA512

afaee837f464a8c65eb4b336e8310c40519f12e15e6b2eb63be397e2fa9f3a0122168045e3efd44de80f25a782ada022b1d6e5d6fc97fd7aee38bd9bf61b3099
SSDEEP

3072:eb8UDEWew58pfbZtp2NsR+BhPzFIMXTzzt/29:ewIee8pXsN3Y7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2856	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2856	AcroRd32.exe
2856	AcroRd32.exe
2856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1684d03b7b67ec0bbd56b2d5f5b4f707.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
81bd46b4ce9f0e68996134e69744a26f

SHA1
5b232f1a4e5aa64ac25ac063141d8a4dcb3f7234

SHA256
356d293196f6eb49e4477ad15bd475c51eff0b1f6495287264f5e72349568c74

SHA512
982fd3c99dec92a972d2d1d46e06ac61c5be5cbe57b50445cc3e5d7a9eaeb72ce505b04c1ac8d1bfabae40b50ec7597b6f7bf87bf75ccae67fb9de7eab1c443d

Download Submit