82b97fd71a8efe39dd68ebecbb568d35425ca0f69d6302480cb177e0707d9ea6 | Triage

Analysis

max time kernel
119s
max time network
149s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 18:15

Sharing

Report Analysis Logs

General

Target

33c6272e508cb6f29567092321562c04.pdf
Size

72KB
MD5

33c6272e508cb6f29567092321562c04
SHA1

e99c65b72742404c56e1729bf9621a543c3f8c6b
SHA256

82b97fd71a8efe39dd68ebecbb568d35425ca0f69d6302480cb177e0707d9ea6
SHA512

864a844b0f43333ee9e5e2b8a5c5c55b5aeaeeb4d0c2313d180e385e5a13108ca6ef9c31a40bd170ca738c1dbf5c61f6ee985553174097166eec258eb9b286f5
SSDEEP

1536:QaOd8Fpht56UuoD+o6iWkNpOPh84PrWCQU7yeh8:xs8FpV6Fs+7Ph84POUO1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1728	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1728	AcroRd32.exe
1728	AcroRd32.exe
1728	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33c6272e508cb6f29567092321562c04.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f88ca2db4b9bce79237be388ae6f2160

SHA1
2cfb3505449f015b99595c079898b8b518c3daba

SHA256
482b021691235ad7c25f26b20e6e5bec2671364e34ac86af8f5539040226893f

SHA512
898e5f430370bf50dc775d803c37d798c0a3673d899a076598b5c6ea0d5b337e9ff934e0cd2e9ca0899cc8d6662e1ef3e0fe3c3bb8743e4d60c8e8a8ddce2c69

Download Submit