d3eeae838b6e8dc01ad43e7cdd1a5fb3f577eaab349e62f70a7bdb14e8fe0474 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 06:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5ada1043a51bf561f26d7dcdd59b8068.pdf
Size

107KB
MD5

5ada1043a51bf561f26d7dcdd59b8068
SHA1

bb5abe5e4c0c87a02a8e110f367f925f03598b77
SHA256

d3eeae838b6e8dc01ad43e7cdd1a5fb3f577eaab349e62f70a7bdb14e8fe0474
SHA512

774bfa5b97363c92f763c73d561ab3e4e7967404f78d847d0ee6268de30e3d4631611ab93a24c9216f26bb09a304f8e8bb5b7cabbb68ee1ead4edc65501efeeb
SSDEEP

3072:J088ykNVCJSXanutw9dGrrO4Yih7HYFfgqcHp5Snt0+f:x86JSqnB9Sr1pufdv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2196	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2196	AcroRd32.exe
2196	AcroRd32.exe
2196	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ada1043a51bf561f26d7dcdd59b8068.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads