c54177d0a6b6eadecef82c513232e82201743c21729bd239ba5ff5171a34d2c1 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 07:13

Sharing

Report Analysis Logs

General

Target

5bc84f172bc4f1f20809a50765626a6d.pdf
Size

54KB
MD5

5bc84f172bc4f1f20809a50765626a6d
SHA1

647521e5c49b0a7d7f0f57bcf228aa55e8b901af
SHA256

c54177d0a6b6eadecef82c513232e82201743c21729bd239ba5ff5171a34d2c1
SHA512

18cb7ca396b5a35607a631ab6d8edd0e38d7ea122ca39aeff10a6c204dc8abcbe2bf5ed153304a6e0236f47206252ba48cc47ee5fe43a7e880745aa656a5117c
SSDEEP

1536:BUrsLkBVNSUIVVfhfakugACRE4o17md3soJ:k3iTKg1Ev17k3soJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2608	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2608	AcroRd32.exe
2608	AcroRd32.exe
2608	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bc84f172bc4f1f20809a50765626a6d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2608

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
95ded611df0dc39192a731759bb6fbbe

SHA1
dba2398dc0d0343d3330bd7c98b8546e0442a85a

SHA256
a542b990f13e7fcdb62494d57aa2eea76a488ed083f8c5aead2f005997792a0c

SHA512
65c8c81c031072c9105c3c46e18fabe83fcadfcd2d71b29a4cff93ac621d8c32305fa3db31a6826a50981d481ec6a1159f0c3c217a8c9a3fb1fafd904513cb0b

Download Submit