176413ebaa547ff13286169833389e4e4c5b75ea39b24352075d8509a8eaafcc | Triage

Analysis

max time kernel
122s
max time network
134s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 19:03

Sharing

Report Analysis Logs

General

Target

012a0d5d1ea503fe7acefa8d6c2a986c.pdf
Size

102KB
MD5

012a0d5d1ea503fe7acefa8d6c2a986c
SHA1

caa30538cfa366d4daf4dbe0e7a0262f52664d69
SHA256

176413ebaa547ff13286169833389e4e4c5b75ea39b24352075d8509a8eaafcc
SHA512

f621c0c45120ad822241935f1979b20b762ff20afa9bae2104991a4d43760484e4aa1d7e31776fb10d368f6309323ef189f169c404aa673517208f19bb7423c6
SSDEEP

3072:E3EF5F9devTgMbq0AKAyKC2E1D4IfdQy74:gzXApI2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2376	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2376	AcroRd32.exe
2376	AcroRd32.exe
2376	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\012a0d5d1ea503fe7acefa8d6c2a986c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2376

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
838be644a12618ad8cb6502b6c7daa76

SHA1
744aa572801efb07c82b212b6ea27c1f2ca80353

SHA256
1622e36a07afab21321172a5016766089805826d931924ef84d531eb0f575dfb

SHA512
ea02224b814a06b5b9c7ca8dd4a2544f6c9f406a0fe1932ab5e5a50e79fa82646a59a188760b5fb4df310a7ef2d6cd54d1eb00bc59c111d0e845cb546caef54a

Download Submit