7b77db9f695ea9833891e66e4953e48f63028f420977d13fd4afd66982029b3e | Triage

Analysis

max time kernel
120s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 04:17

Sharing

Report Analysis Logs

General

Target

536d3a139e293c5c62667dafd5952829.pdf
Size

122KB
MD5

536d3a139e293c5c62667dafd5952829
SHA1

8bb24731509d550f6ea29f907e2d3e791d23fea6
SHA256

7b77db9f695ea9833891e66e4953e48f63028f420977d13fd4afd66982029b3e
SHA512

c1d523d6be7cadacb8fcf12366db9d4e4df2f8bd36759e7bc184029d2e58c355ce29b25cad68ac6a6c02466742e7355212be0609fff54bddca1d7341303c63dd
SSDEEP

3072:4gsYu8f8zwoLXjzFv2SaaKxtWClDcslrTEZ6kQ1m:tHubzfzFyeslrTE9D

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2144	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2144	AcroRd32.exe
2144	AcroRd32.exe
2144	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\536d3a139e293c5c62667dafd5952829.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
803b9690cb3ef8e2ac167df7145b0071

SHA1
fd24bbf4784137a4613ec8a44ce8d62e7d8e1ad1

SHA256
f42e3c5d1ee7b90f5149396682082bce8ff219cc6fa7f5cc714880528ff05961

SHA512
e8ad8d2c88702cad997b60ee8b4391cb3a801ba81497f8968082bd67db6066148e7cdc183e001153e9bc286ba68585bff8b0b1f6bb78cb3da2477a029a795cb6

Download Submit