b29512810aa3f0236b6633aded78e4b5b15939818ccec0349589b1720cf45181 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 19:23

Sharing

Report Analysis Logs

General

Target

019731145cfe784504510eb28b3c4af7.pdf
Size

34KB
MD5

019731145cfe784504510eb28b3c4af7
SHA1

282d45737a35aa05d6d0f429497ac9f23181f907
SHA256

b29512810aa3f0236b6633aded78e4b5b15939818ccec0349589b1720cf45181
SHA512

142a041594806f0889f4baf5d6ea09da60cc0b8d1220cf947f20503b14f3dc9c9c2bfe938fd5d821a77561fe6d439485f4824227701b77834755a10c049b1a20
SSDEEP

768:WiCBa+jw+XsBAfPy+CDJAO4T4PPrEDFs+8zQGpV12:Tka+jw+48PY6SPKtmV12

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2212	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2212	AcroRd32.exe
2212	AcroRd32.exe
2212	AcroRd32.exe
2212	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\019731145cfe784504510eb28b3c4af7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c957213537eb7a74a3d21e2266eac14c

SHA1
c9adcb60df571b18c60379569f2dc4ae977ad16d

SHA256
2ed95fbe0c850b2938eb1a5c67613c51ac055df5c4c35268a10fe34342aa3f4a

SHA512
9aa9aba5cc92f2c76d925311bd073d1cf2346390319c9bccb9968ef7c38c8252e7ca99facdf169478e93e6d538ce52272007fdcda48d6319c0d42c0965c1bef8

Download Submit