1d4f4f4731708f918a1e5ccceca0d167e16bee2ea261af1d1730d3c76014c196 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 19:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

011d67f88f9ed0aa715bad10c75b94e0.pdf
Size

42KB
MD5

011d67f88f9ed0aa715bad10c75b94e0
SHA1

3eda9dd8c8527fb425941fd2baf8e441891a0365
SHA256

1d4f4f4731708f918a1e5ccceca0d167e16bee2ea261af1d1730d3c76014c196
SHA512

68e80031e3692a81e4412e3c12a1929ea7ecadc7983385c521c1c32218f341d82e7dd686f59df5f3ddceaabc247ca0f982b73029340133801d0bfb1541718821
SSDEEP

768:fQz9cUewirTxbRonYvuy46A87ZyORmi+/fhdjNHmw2+/gb:fc4wc42x7Zqd/fhqb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2492	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2492	AcroRd32.exe
2492	AcroRd32.exe
2492	AcroRd32.exe
2492	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\011d67f88f9ed0aa715bad10c75b94e0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
22ca52c0c3f34aca764362e2d89f6048

SHA1
7af267bd121c9f46b3f387b2d65ba9bd25386428

SHA256
ac15b31f78a87c2afb9be47aadd097768e8e960578693c3a5ef5d10b5c0dd0b4

SHA512
92a7fc1dcf725460301aab1c171c1a5cdfb82665b39f828f67913ca12f52490c0c28efa709650b7fdc64e2eecc47c1c46f2cd23dd1d05d5d4b6ef146d97bf8fb

Download Submit