eed6fa22278ec733bae51c71e5a08a218fda47443cd8e9174e4bcc4b16f35a9f | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 22:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fbd28da8deb2afe380e0bdbb77ea2ba6.pdf
Size

111KB
MD5

fbd28da8deb2afe380e0bdbb77ea2ba6
SHA1

5f41dccc97975d0446930072a277d422a7c5b7df
SHA256

eed6fa22278ec733bae51c71e5a08a218fda47443cd8e9174e4bcc4b16f35a9f
SHA512

39a0d781d9c3b91f64ae604064bd0008c029a0980f17e7107e3b513213cc4a14b40902d6566e27609a5531da71fa07f8fe3967a1b330493e2d8902af64e6ef01
SSDEEP

3072:8Akvp/5S0iuUJ6ys06IIHpGWDbqYkdpiavsUSG/k:rwfqJ6ysPI+oW7zav1SGc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2992	AcroRd32.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbd28da8deb2afe380e0bdbb77ea2ba6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2f30472731aba28f115dc9c09f31a572

SHA1
b605e5a868eaf942df0ef7a02e6c062dbec1f1d1

SHA256
ce825ac1c16520a4870e93c00a415976fcf6892a024c38ea3046854a5c4fdc94

SHA512
1b7619a86bda4f407ee1995b762acd6021fd6afbdfdff8371f0937c1f325c417768044402e932c299f152102cc394b6d11da450e98855aad0acc173b489765c1

Download Submit