0e2ce2cb606ce1b5edea8e8769710ebd74488ec222fd8db7c90aedb688d83242 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:23

Sharing

Report Analysis Logs

General

Target

02fbaf0227bc392c7cbf214214ca258e.pdf
Size

45KB
MD5

02fbaf0227bc392c7cbf214214ca258e
SHA1

197c843618725c22b3af80526a728c6abec36bbf
SHA256

0e2ce2cb606ce1b5edea8e8769710ebd74488ec222fd8db7c90aedb688d83242
SHA512

e7332259a4ea7619f7b29f06dfbb6b8bb76bbdf797d204c91a352df0a4ebaa565fe0438cff031b3537c4c5bcda1a4be8bbb0cdad5e9384d1135d965e0b1e924b
SSDEEP

768:KCgVzJiDO46kehOUvOKrd6oOM/Itirx/Ev60WIQS213:KfvbLh9BrZQAVOWMI3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2240	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe
2240	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\02fbaf0227bc392c7cbf214214ca258e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
97b31c2cbce8da2274e5c60a8ae808b8

SHA1
4122b8815421d58185cc4d223cacba80307f1091

SHA256
2e09083b84c8779ea9bec4af2ca7173ecac9b4ec8e840a441b1cfe297074896e

SHA512
d15b1d59db9253e4dfcf545da5d18316c91cc2f6b08ab8ba854a8471b2da623d7d13c4ca54d50a73f90c1433e0449e511115d67657562f5f6acc7a379ea1a3ca

Download Submit