7f4ef30d9373e591d6d9b88ea9f45c432fbf82a62ae27a4afff06d6335a764d0 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 19:40

Sharing

Report Analysis Logs

General

Target

020c896b0312c6665ded0ec0c7920e1f.pdf
Size

126KB
MD5

020c896b0312c6665ded0ec0c7920e1f
SHA1

8b6fb71eb7a52f33f2715fb05520c027b7e8e942
SHA256

7f4ef30d9373e591d6d9b88ea9f45c432fbf82a62ae27a4afff06d6335a764d0
SHA512

e7bd44bcb42bfcfd0e21429f155295d3f16bc7df7cb6930b48d17f15075cecc6a72a8ab686f6dd3052e5e222c878c7292e76a1d978c1417133ecf097ab932f1f
SSDEEP

3072:vFNaATzpSrH+TPonGvfOdZ5e56ag4rs4E3N9KOgE4v6A:d3u+zou6GbrPUN9w

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1204	AcroRd32.exe
1204	AcroRd32.exe
1204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\020c896b0312c6665ded0ec0c7920e1f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8131dee9a56d924d245827eb47cadf6d

SHA1
63b3db3892e66171377a51fc6502b0c5c95e965c

SHA256
710da1f97fa1f6b382dbc11f1d4a1c3b0b2dcdfa022c52f9385288cac00a2a4e

SHA512
fc301ba87272e544729416f7ee471d43f76e7ef9fc2ae67b6eac3cf139b1ac427c9bc8c737a49507b08a4233e540232ff6393b866220a11b18b75184017d5789

Download Submit