34a02724ef986dd5efd8f3452c690a579950a2efccf9666e8b1b46e7d1fe1792 | Triage

Analysis

max time kernel
123s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 13:33

Sharing

Report Analysis Logs

General

Target

Moi4B966AF5-F19C-4B70-85E1-167D32E29D64.pdf
Size

171B
MD5

00fe26a116d3f23e78dcb6e702aef849
SHA1

23128eb35d405ad7316a3b6cb4bc312c772b577e
SHA256

34a02724ef986dd5efd8f3452c690a579950a2efccf9666e8b1b46e7d1fe1792
SHA512

b0c48b5c1d0c006c25be7eac5abe88f2a3fa4140d4e605a4c14cafc2d4c7c0f7494859e8506474a97b0ac857350e5ad19de1c419d939d82119c777ce57efc46d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2680	AcroRd32.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2680	AcroRd32.exe
2680	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Moi4B966AF5-F19C-4B70-85E1-167D32E29D64.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
030035c14abb698d4fc71d3089fb383e

SHA1
74ee6521a450b4ae42550306d6284037d98b8d72

SHA256
62cd369bc68b9abab3161e20d01d51c2444de2fbde9c54eba8606024db61a727

SHA512
eb17c442eb27e09a28eaac0ba668f36b276140dcbbffedf6b694e1376ebc4c11ce20b2288d99613f5753182280503d058bac53f0970d81eb6f5b9b125c1c4c3c

Download Submit