db30e52ee5312f895c739b48d9ed170096b0d1e05f95d85f5349f0a591d50918 | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 21:05

Sharing

Report Analysis Logs

General

Target

0401dc09ae959e3a4d1d55d43b07abd7.pdf
Size

136KB
MD5

0401dc09ae959e3a4d1d55d43b07abd7
SHA1

702a00c93fe402b1f0c2fb0c62df8b4717174f9c
SHA256

db30e52ee5312f895c739b48d9ed170096b0d1e05f95d85f5349f0a591d50918
SHA512

7356cde79c4c36dcf1b7aa0d1396a75a97ba23caf1f0a3fc290a0a8ce20b6e620903a2d4219aa51affa963e7779890e2a1a26e20aa3b00d65526cb57aa989be4
SSDEEP

3072:Gxl5xVUyqihQOnwobK9ufGQNq25vlv9eaeRbR6Q:GxkyquQOwouc1YQvlvZ6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2968	AcroRd32.exe
2968	AcroRd32.exe
2968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0401dc09ae959e3a4d1d55d43b07abd7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f9793965f8554ec6d947302ac01f6f03

SHA1
ed48eae5531d194e7d895dbbb25902fb38b2a024

SHA256
52ae02ebeca8cd4275fd54bbc54edcf72a74a3e21fc59436a7c58be7935bd066

SHA512
f216b093c55e922dafed2c348f7113d018f585affae90404f9d7e61137f28dab40a2df53b6dc72e1adaa17e955b10434d6d11b0f7812c802dac38eceb4b60761

Download Submit