7ad1be7aa28152939379fa1dedcb9e711b36474906eb5c225bfe2dbe4e92168b | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 23:23

Sharing

Report Analysis Logs

General

Target

06d47c6b69b1f82cb9563a2e698feb36.pdf
Size

37KB
MD5

06d47c6b69b1f82cb9563a2e698feb36
SHA1

801e8bf4d6c14e2c5aa0efe3bb5662fad75ba62b
SHA256

7ad1be7aa28152939379fa1dedcb9e711b36474906eb5c225bfe2dbe4e92168b
SHA512

fde4e4833ecb8df3591bcba565914e4d9f96583f5f8ede8db5180d774f89b673005079a3e1cc43e7c272d33cf2a924b08c86b404de93f703926bb90a199aaff7
SSDEEP

768:+phaX6IUYXvbVCFHtJsfAz228jHjM72qmIyC/XFWGZX:ehK6U54TucTyCdWGZX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2180	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06d47c6b69b1f82cb9563a2e698feb36.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
13a85293469f0a100f149f6dc3578e54

SHA1
a4497338227d15c1698455f66030675deda8b745

SHA256
d76d26a48fc5a795b1ecad500e54a0a347f51873ee4290811947d66368361ce6

SHA512
833a8c6ee2ec7cf6a4f7e698903330a48e35d8e2c7f32e437da27952bc8083bbb29ba651105e2961a2f8597dac0edcfb324b4e598936c9e2649b837f2ed0cdca

Download Submit