d02142faaa4f7e9ac29f58f8340d6dc77c0cbd339f4c727182cd5eb9c1ebae57 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 02:49

Sharing

Report Analysis Logs

General

Target

4dde6e06cf02c7cd81568f3badbcae28.pdf
Size

98KB
MD5

4dde6e06cf02c7cd81568f3badbcae28
SHA1

15d493cd5cfa6b04a359802dbca6b026318e0b53
SHA256

d02142faaa4f7e9ac29f58f8340d6dc77c0cbd339f4c727182cd5eb9c1ebae57
SHA512

7e27996b370c699e67c8d3163554950e1284d0f4d9f89ef845fd10f8b55d7d9a1da2503d9874c8663ac01055a501c82d9a103f23abbab7fd4565ea65d1f9de29
SSDEEP

3072:GYke90jaZOe8AcUQ50HKmVmFacBkguVgb4EukKFZ:B90W4bUQlacHutXH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2100	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2100	AcroRd32.exe
2100	AcroRd32.exe
2100	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4dde6e06cf02c7cd81568f3badbcae28.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d618c4b7b6ab6a8e4068dd44f6ed164d

SHA1
21ee44d732a8116a37e74203ecfa1598115b851a

SHA256
fc857c33b1f11037ccbe22e492116bb91e915c3e90dfe5013d782f55b17b86db

SHA512
63c001ced0fb6cfe40e604ff7ae7bb40ff1494ffdec5f66b5d8fc2c02c7721241358f199ab1c4eca342af4bfc1f770c7dcc32086fdfdaafbbfafcdbfa622d20b

Download Submit