41bbf7ba28171a964f0604655a30ee221330d5184166e67b6da0fc38f1202096 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0288390ac5ea6e066e4d5299a16cfea6.pdf
Size

113KB
MD5

0288390ac5ea6e066e4d5299a16cfea6
SHA1

9f9a489ba518693d4b9007e2f3a90529c92eb4cc
SHA256

41bbf7ba28171a964f0604655a30ee221330d5184166e67b6da0fc38f1202096
SHA512

8665308b73ae2d937b90a3b2c6e38b8001da0835809ea143a17791cdaf1a815009669fc86b059fb94c015d4d1e41129de9f2e3ea65fb96b1592be6fe74fa97f0
SSDEEP

3072:SDPCTy1ugBErX/dtHA+bJ9SYaPPi3nLhY+T8Atv:APcyzBmVt3WYqyZ1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2660	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2660	AcroRd32.exe
2660	AcroRd32.exe
2660	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0288390ac5ea6e066e4d5299a16cfea6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8a154269132912e947fc63e8fb9464eb

SHA1
a6db6d8a6b43d76bc808d241db45ae6b6f763bd1

SHA256
8a15e13ba3554a4df62f9abeaa427912ab83fd5ea32b5a74f0f7758205f2db95

SHA512
b7b8678bd10f66f24530a219cffc1a798f2b275d4134a9b206761288bdeac644b0d6e6da6ec00e96cf3880387161d7d56c77acce696a40eb9296b19a5b9b9b57

Download Submit