9e24eeab6d5331fbbf38fcea39966467dcc9e3638e4a85f953970baacde0e959 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 20:48

Sharing

Report Analysis Logs

General

Target

0397bce778e1a4a7d5de3b179b872f61.pdf
Size

96KB
MD5

0397bce778e1a4a7d5de3b179b872f61
SHA1

0f23b40745a0265fc946034164b635ea3e817e02
SHA256

9e24eeab6d5331fbbf38fcea39966467dcc9e3638e4a85f953970baacde0e959
SHA512

2c96b57430ef82f17c06c7c7c6773d3796f4691988c0440af6b002bfd21d64998f0b8be4e879fbe63e71e864ddee4072124e5ade1c3ced954bf0d39a6f8dcf39
SSDEEP

3072:x6lqlJTZ8/Jg77MlBbfSr4WU5UMz7BpaI9zm/r:xgqO/JgXoqrXQfG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2512	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2512	AcroRd32.exe
2512	AcroRd32.exe
2512	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0397bce778e1a4a7d5de3b179b872f61.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
11c04616d7ab55924e962f7a949f23fd

SHA1
6c99b4a7f0886b7698ef772ee4c8ac1a1ef1ca81

SHA256
985331181199eb1aa874214307a0e640fa0507f799a7fd79d743a7db8743f988

SHA512
2a1c737d1ee1ac3295446062f8a1a3f93cf72717ac366e324da1820d8c19dcd37a82befec9ee69ba73f52d5003cabf0e03f17d3c27d2abed4dfb968e7f7907e3

Download Submit