708bca58db46ab48ec85ce1c1781a46978738936146ece566752ecea42131893 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:25

Sharing

Report Analysis Logs

General

Target

0309ed72c2a6ba715b0da9a8ff2f7edd.pdf
Size

37KB
MD5

0309ed72c2a6ba715b0da9a8ff2f7edd
SHA1

f87947ffa2b94e0771babf054e92e94e8a8e9f9a
SHA256

708bca58db46ab48ec85ce1c1781a46978738936146ece566752ecea42131893
SHA512

c88c1b7df8fb2c5e1cf047eab19f257824fccba6c86b4004fd7853e1c2666b046f71d025a9130cb66cb1c38a93a52651e384c26cc54edf94beaaea32f0f97eed
SSDEEP

768:iAoohZThvadIrlCVHGETW6YcCrkg6zV0qAeXZVTHx2:v/pmr9Y/kgIOLWvjx2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0309ed72c2a6ba715b0da9a8ff2f7edd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
db501eac6d1d3a82d00f422aa975d430

SHA1
da24447a2092c0e91efac161828f6861a1cc79bb

SHA256
fcb91f1f2df028c2416e31fde2c2ba4125d6388ca4484218e5c51213defeaba2

SHA512
2f9cac495e93d40860755d1a8ea95fa04fddc114c7fcbfe1b0cc252a13a2a75944c688f5ff0d81b14afbc1e6b45653fe7a6f601b65ce8444542c6fb4dd89201d

Download Submit