c539148f9b80b9697e4b46bd881d1f73798e7d7ba800263bff8fdd6e1e8f39e6 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 12:47

Sharing

Report Analysis Logs

General

Target

6fa3ba0fa706c46a85d640ec602cef90.pdf
Size

55KB
MD5

6fa3ba0fa706c46a85d640ec602cef90
SHA1

94add093fc544740a6b39aa1d2729063554630de
SHA256

c539148f9b80b9697e4b46bd881d1f73798e7d7ba800263bff8fdd6e1e8f39e6
SHA512

0adf12bc392fe46018a6f200898cd8cd4f3adcb231fc9eb446660ee1ae5a553152fa36947e2e43f849ffdf27d2d54a68a56f104ca242792369c3e99d34487b34
SSDEEP

1536:iGFoOSRi2OHKvdxVefbMrW+mSPVmUIFqjTG:bFojiIvXWIVmFtr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2424	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2424	AcroRd32.exe
2424	AcroRd32.exe
2424	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6fa3ba0fa706c46a85d640ec602cef90.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3c9086d3d3aa01f0411e51c860b1360a

SHA1
5fb1c0bdfc9fcf998589a00e48ffeb2d28502a9a

SHA256
084bf94ae8664e9e2a09f3bd2ef4909f35225e76b41f1ffa8c15348cfac8db73

SHA512
f876453dbc9e2859c7ffe8614246aa0780264a6eae3241cb3fe10121626cbcd29fb215f1ab93172c13ef94a1d25104b0c8063eb807a850afd9290e90990f62f6

Download Submit