a6c75119da64dbac63a6fa33b235bf73bdf714c3d05021f130c7ee0f84af9c34 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 01:41

Sharing

Report Analysis Logs

General

Target

4a1819f161035d9a7e08c695b072d6d5.pdf
Size

106KB
MD5

4a1819f161035d9a7e08c695b072d6d5
SHA1

c8b93acd4c248d2b5e842b887ee1882c59c82055
SHA256

a6c75119da64dbac63a6fa33b235bf73bdf714c3d05021f130c7ee0f84af9c34
SHA512

8cab75668542a9f2af9bdafc2799af8ff7b752a576eade035a0eb846ed3682186c821c09ec314992dc659d50a0a54b6a5066a85afb6c383d62c74b6a2b474452
SSDEEP

3072:yC48+eOLut1bpD1oj38qac2FuIDRxMJCNXtQM:yjgY2pDS4ceuURdXn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2212	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2212	AcroRd32.exe
2212	AcroRd32.exe
2212	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a1819f161035d9a7e08c695b072d6d5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8c68afe1630c55e815e668dcb306e22f

SHA1
6dd14b2697f311d8c62927371a5c8779b640efc2

SHA256
c31d7dd331f070080acdfe2f61369f813cc6bdd710ae8c13be8b081659e28cd2

SHA512
02131d3b6c48c18203fa315038a9b569a104f9a344af4c0c80fcbbbcf9144ef1dcd964aa18e79995b3304b560a02b9751d69f9328563518d2d37fe6b2ba79ad8

Download Submit