a1cff5ed6af1867a1da61ee5371fcc069d6d3696c269ea81a9810ba395e9e1b5 | Triage

Analysis

max time kernel
245s
max time network
281s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 00:29

Sharing

Report Analysis Logs

General

Target

46816bd5c4444ef3e2d2d30e4773a816.pdf
Size

101KB
MD5

46816bd5c4444ef3e2d2d30e4773a816
SHA1

4b967ded4f509a25d7a9c6f0fbf64930f512d24a
SHA256

a1cff5ed6af1867a1da61ee5371fcc069d6d3696c269ea81a9810ba395e9e1b5
SHA512

9ad75174faa3532ff1b230c75f30fd11c822e90e307db7209c720f02fff3961120202522f746a6d22b35e1857dda53dd94c4ca933e78efa153efe1b2bfffdfc8
SSDEEP

3072:qTimN7355akXXMz6wSrYrhAtyC4lYtQ2O:GtN7355zXcur8gyF3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2012	AcroRd32.exe
2012	AcroRd32.exe
2012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46816bd5c4444ef3e2d2d30e4773a816.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
286506642c6947109d9583087353586b

SHA1
39b78d89ba51b1aeb6d0e80094e221605b8e6343

SHA256
8554a25012a9d4ebf7797000e75afb13b2a2147b68bd03086aae6d8d81937713

SHA512
99715265b6b1dfdbba02eb84b5e5bd0a9a4c64a31dfbc774522d0b00760b69b61b80762396daf85e0a69fa6638fb6ab406fe7880747fd158e7740da2bbf14d29

Download Submit