fc23cd6f7c0d232d9472942baba8ea73c177b7510fc0704b213c0aa5299456d7 | Triage

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 23:15

Sharing

Report Analysis Logs

General

Target

1fac2f87f3b6d0df34f9fcc58af71178.pdf
Size

32KB
MD5

1fac2f87f3b6d0df34f9fcc58af71178
SHA1

9f18b8fcde2520ec46aa6dc1910e8ed633482a2b
SHA256

fc23cd6f7c0d232d9472942baba8ea73c177b7510fc0704b213c0aa5299456d7
SHA512

c5ac59e278eecfaccd3b048936fa37269eef5b9abff8d83e0f3fb2a87c536840b1751306150eeef522a82a900d4fd54e4ebb0ff46a8f39c66c621a704c858ffd
SSDEEP

768:WgGzpDeuBG2sxs0qoXN1UV0fWz6DMvYZzEs9E/9kl:DGFSuur4V0rgYZzEUE+l

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1332	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1332	AcroRd32.exe
1332	AcroRd32.exe
1332	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1fac2f87f3b6d0df34f9fcc58af71178.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
574f1aa15b61ec589bc1526af1704623

SHA1
7b571880fbde753ebea8a86b370ac560e2e324a8

SHA256
23fc9ecdefaccad814d66862003adf69816d113d7cf9a9a055ee2922f1817d19

SHA512
605c7ed9893d30247292895e755abfd614b245124ab03da50a46aa61d5057959649ca88bb46001177a7c56ee6afe49fc8571a089a0d921922b1cab33fd635763

Download Submit