442df72cc7bcb6200afb6bcc535c1c010eadde81128d6dc26fd59a1c7219f127 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 22:35

Sharing

Report Analysis Logs

General

Target

1e9e7a6553c8e06f74ea8f27131dfe3d.pdf
Size

45KB
MD5

1e9e7a6553c8e06f74ea8f27131dfe3d
SHA1

6adffda5b8e4d71fb2fe10374692988cf9b5037e
SHA256

442df72cc7bcb6200afb6bcc535c1c010eadde81128d6dc26fd59a1c7219f127
SHA512

49b273286b3af33707c365f02e10c6070718771409716b0ed4eab2ad8011ea04f10c855e826a2ba1060d2abf9438073fbf768e29aad394c3368559dd93e5718c
SSDEEP

768:wdzpDBV4+ryYjE9KQFikjFa7Mkx8mKqJNjFqgFs:aFzjXKi38mK+Xs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1e9e7a6553c8e06f74ea8f27131dfe3d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2fe2b1f02528f060076ec89f1994542a

SHA1
cb54b41381d7da21f4dc5a23b2c5d434bbc3fee9

SHA256
b63cc50ff7ade11ebe60d38a559fb252e878a5d1cba1e9fcf1ba66fa55808ecb

SHA512
6cc07d1f61b04cef77e2b43bb36a63399c3976555ee137169782ef43f2339c2fb782e0836db190a1d66fb219655b944b96fae13c054df332c4e262861666f693

Download Submit