5e3a25b00653c727d30f21e62f2e18268975ffbab724d44b1c3f99cbb203c49d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 21:55

Sharing

Report Analysis Logs

General

Target

1dbcb9b43a6c8cc63f917d26f773bddf.pdf
Size

34KB
MD5

1dbcb9b43a6c8cc63f917d26f773bddf
SHA1

9d24e9583241535e337437f21a47b62c4057af9e
SHA256

5e3a25b00653c727d30f21e62f2e18268975ffbab724d44b1c3f99cbb203c49d
SHA512

ca513574e3e35e0c4495c221261178cf0d56b96d942a9707ddc37ce31c53be32d6089211c7a45f928141b064c6e49e067797efe6ab790d3f2766ff2b521177ce
SSDEEP

768:9H1N3fKqld8svFHPmE6IMj2HOGf9HSZ9yy5SkJsvc:tbiCde/KHgZsy5nJsvc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2248	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1dbcb9b43a6c8cc63f917d26f773bddf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
575d4299f9a6fdc334863505b8063d8e

SHA1
53be06402af776baa6281ab22ef8ea3ed9adce12

SHA256
03ed5ae664f158e9ebbd2700c75d29810483190db7315176ad43b48225f9d0f4

SHA512
1d25345072fb655846a9a9f7d91321323bb9f261ab8b8202404eb8a0f3b8dd0f32c9a5499c1245fb6bd73ecfb9f985d15d7cb36080d42c0090b896bb7bc1502a

Download Submit