d1237f34dcf44dc54f8c05f1b886a97e9faa2854156a382d75517d378a3dfae8 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:44

Sharing

Report Analysis Logs

General

Target

04bed0fe7e9dad784ad249b01163a93d.pdf
Size

67KB
MD5

04bed0fe7e9dad784ad249b01163a93d
SHA1

e20193a47fd4482d1b694fa76e2731c1a8fc7676
SHA256

d1237f34dcf44dc54f8c05f1b886a97e9faa2854156a382d75517d378a3dfae8
SHA512

a941a5af6bc5e0299fdc949293588eb609dc96ef593128524821ee98964fa64684fe9fab1eb870f0f89e04b711c34735c5e494bce19c4cc4e1ca4a340b5a50fe
SSDEEP

1536:CHJnp+XO84T+S1K3qsV93UkIx2E0wq4oE0h4sYnk3:gOyCS4aOVFIxRFq450Obs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1048	AcroRd32.exe
1048	AcroRd32.exe
1048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\04bed0fe7e9dad784ad249b01163a93d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads