3619838c40ed38ae4a2b942f75067cf5272338176573e5cd08849511e9799301 | Triage

Analysis

max time kernel
122s
max time network
135s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 15:37

Sharing

Report Analysis Logs

General

Target

79758bb2831870c0e6ae34b9c2e09c53.pdf
Size

98KB
MD5

79758bb2831870c0e6ae34b9c2e09c53
SHA1

b36660b73c5069bfa265e6365dd0c5d5c362e4bd
SHA256

3619838c40ed38ae4a2b942f75067cf5272338176573e5cd08849511e9799301
SHA512

828407b0683dd2485f4ac405c8fc674c67b1629d63446f03bcfe969d447e61fb8bbe5be40de09a5b2c099673cfd0a5c00d7267e62c974e6a9b164dd0041fa28f
SSDEEP

3072:W0RbhgW8mVWSRQPjlwhYMs3QiefymjTZo:CWVkSRoj9MsFmi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
616	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
616	AcroRd32.exe
616	AcroRd32.exe
616	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\79758bb2831870c0e6ae34b9c2e09c53.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
61834d96161c96ce2aebb6f8d86c73a7

SHA1
f238bba480ebdd4b7d77eb23b955c3d4e1d67159

SHA256
6a00965887e9c6bbd1e0d32aa89056ca736e58e38db9a3f65bbe4510f0d83772

SHA512
1f5b50c7a32f2102b144992f5b8e3b511eed5f86dcb0b119d198593ed9520455bcc7db661107f4bc969d11d521215982f09137c78d740cf78e8e797f94051c82

Download Submit