8d69e25cb548aa2666bc96187d1386c1ff60b605b7b08da1c9adfdce3986f87f | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 18:51

Sharing

Report Analysis Logs

General

Target

00f2c82116dd9eb6ed0470045ca82495.pdf
Size

123KB
MD5

00f2c82116dd9eb6ed0470045ca82495
SHA1

a0e07c106e932eddd0e1c57c9cdcb184f5fd82df
SHA256

8d69e25cb548aa2666bc96187d1386c1ff60b605b7b08da1c9adfdce3986f87f
SHA512

cc262f506491d3223ceb785013516a6c77afd51c8f582f5d334f500f291a01a754e801f7eca6ca66274dbc7a03dc3dac76660c4d946b5f40804e3f2d64de6a4c
SSDEEP

3072:PwFlXbkuYzoUY1+dZAIxhL0759aOrwCzq0M3i7p:oF9guYzLZZuF9aPAx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00f2c82116dd9eb6ed0470045ca82495.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8efec73c231e6760a51d130bb629256f

SHA1
db2f7ab4dbb852b1deb515d5d49e24f160be947c

SHA256
cc8d7cca0d8638f95775f72965073ecfe73656463acbdb3b8668929007a97348

SHA512
2b95d278635af1ccd7df41019566ff78ea514fb65231dca326b5aab8ba911bebe21364b9373a00ac68e92d31c3603e04d852fcce93d4fb7760fd950efebdde04

Download Submit