8ecf67d4be4308489fc4eb565f6db5b5d43cd0180a8c960704b73f6bb0de4e66 | Triage

Analysis

max time kernel
117s
max time network
142s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-12-2023 20:56

Sharing

Report Analysis Logs

General

Target

03c7e17988d6dd664dcf0037af3e1e4d.pdf
Size

35KB
MD5

03c7e17988d6dd664dcf0037af3e1e4d
SHA1

205b47e0c10f87220e0921258edf3105e9ed6dc6
SHA256

8ecf67d4be4308489fc4eb565f6db5b5d43cd0180a8c960704b73f6bb0de4e66
SHA512

ccea35c183d49f61b8496b97097577875dd0c9114e750ebf435b44ad5169a3fa70f3a4eaf3487cc71a2ddeaa2f48b9227da3b854d0b1ad2dbbd7669d2041ef81
SSDEEP

768:DXnd2+WImsTkx3nsZRiaIrD1QaZ4EE4rIJkKioUPqDd:tWImskph4EyhijqDd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3032	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3032	AcroRd32.exe
3032	AcroRd32.exe
3032	AcroRd32.exe
3032	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03c7e17988d6dd664dcf0037af3e1e4d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
10b827928a6c949f934fa08f5fefafdd

SHA1
1cd44fc848269c6a996945c4715559974401eeca

SHA256
64e73753f1538e0283d00d0164c17e28e8b4ee49d0bf657654cbb38875e7074e

SHA512
3d91db261c7d3684b7081f66ba4f9b5e792d4d7fbf263862aa70e77b76374da6a8dceb8884a6c852b708cad147300415ecac94eaa77f30ae51449b3d886c27d9

Download Submit