60304df2ce8d041ebc40b923f4a03cb40c6fe4661a6383df3e0a804ab78d3a8f | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 23:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

067299651f11d9fd47f855be96975cdc.pdf
Size

34KB
MD5

067299651f11d9fd47f855be96975cdc
SHA1

1cb6b3d790ae7a00853a8f831398078210ce61ab
SHA256

60304df2ce8d041ebc40b923f4a03cb40c6fe4661a6383df3e0a804ab78d3a8f
SHA512

9868f4974cd515108914d7428026250ecab7d3ce4876dd0eaca11bd06e7fb4ff09b3e5eeb743f11b6193a5ecd5729300beae6de14ae35adb7e95832521e0b7d2
SSDEEP

768:d5YtRyEs50uVp9FjhIONYjrUC/XpQtq4vbzhneye1W:4OwuBNJeetdjtneyeY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
368	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
368	AcroRd32.exe
368	AcroRd32.exe
368	AcroRd32.exe
368	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\067299651f11d9fd47f855be96975cdc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
cd00154682b82adfbc23db6863213acb

SHA1
acd0d7cdd6fdb527a51fdc99ab128ba2e00a1078

SHA256
1f1cc7802faec4b642f1d375c26b895988ffc6e00ce0eb5376db6b224b1d6f5f

SHA512
b0ba5a33fb6af109a4b4d52b53119e02cc6c37da3e91f4171316129f338fc0309661d21fc1711af334c1aa8bdc42fb44d8e0744d062a0628373a1a10af750912

Download Submit