5fce1d71245b1d012e9d873c40095857323286542b11373d6ae861d5f5f8ff92 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 23:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1f6f9d3af88bc13ea2417993cb97811d.pdf
Size

41KB
MD5

1f6f9d3af88bc13ea2417993cb97811d
SHA1

08349eade234f4c4f14c4fa2b4eff4cc9629a5b9
SHA256

5fce1d71245b1d012e9d873c40095857323286542b11373d6ae861d5f5f8ff92
SHA512

9796bab01b8b012aeba86456f1972153f18e9286bcb73e39c1cda226b7ee118872cd1bea3926e5080f6d5b4a092e3537a40fae1d0452602ed990501cdbbf8056
SSDEEP

768:xqiGA9BIqUHoo3H9DRCvr69XY7GHhYOg8Gtn99lt0av:xqiJ2Hoo3dlq0099L0av

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2972	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2972	AcroRd32.exe
2972	AcroRd32.exe
2972	AcroRd32.exe
2972	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f6f9d3af88bc13ea2417993cb97811d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d43222006a71ac2afc3cb12b36f14810

SHA1
bb9d2fc6a963215422f7f735e46b884149a85dc6

SHA256
0338b7d439baf4e05a37b25e6357425e6b4698e2c1410146b963aa409ca64faf

SHA512
62f83f117c585753060ced6068225de7f01e1aeba2e26d5c3269d369ea6f68a99654b7ed0c52069ee4486b08166c065c8fbdeb5b1967aae669aaa7dea6555bed

Download Submit