2803020e79e9a102b2ffcad6dd33ebcc486d941c0af31d21b92a7d88393af753 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 23:15

Sharing

Report Analysis Logs

General

Target

06a78ddb1ab7deba947eff7c747aa2b2.pdf
Size

96KB
MD5

06a78ddb1ab7deba947eff7c747aa2b2
SHA1

2da5a4b051e5d06af5095ad782608740ac0e1739
SHA256

2803020e79e9a102b2ffcad6dd33ebcc486d941c0af31d21b92a7d88393af753
SHA512

2ee71be8e26ae3bc58349d1b217255306401a085fba718e8ac87f4aabf3c82f4e028c613b9bfb4ad4d893980916cedcc510d754667b38ccd5979a4756276a78b
SSDEEP

3072:YsWofYFRUgsh4LGEgPkc8rkXb+r4zmooYxId3:YRofGRqhH8waEzBol

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2856	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2856	AcroRd32.exe
2856	AcroRd32.exe
2856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06a78ddb1ab7deba947eff7c747aa2b2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
de1f1b6cd4928c2d5986d1c819507851

SHA1
faa8dde56e321e1c2e4478653354f562d5e5f7da

SHA256
f6d6f3de908b23f7c333789767dc9a25c6fb7093b20404a9c2fbb71d03705590

SHA512
cd7d867192900ee8ce498c755b7e8bd4ab5bd1f3a7b09bd0855579de2ca9af5fced02d6904fd340efcd1b4d3ef3753b3875b10de89b4b4bfb3dc05f170cd09c9

Download Submit