9be48e83728a8dd59ccb9b6998631049f5026647d7e9c5e4b2a762d4d6adaa0d | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 22:56

Sharing

Report Analysis Logs

General

Target

1f26cd2273977e956a9905ca16f7557d.pdf
Size

34KB
MD5

1f26cd2273977e956a9905ca16f7557d
SHA1

c90e1a65859494d9498f2e023b4953fe96a38bed
SHA256

9be48e83728a8dd59ccb9b6998631049f5026647d7e9c5e4b2a762d4d6adaa0d
SHA512

afdc9f826a313f09a0944c88ef2750c70679c094cc93af751d04642aaa111342ca0702311ca5e9b476edbf40b888b09a22ded6abd8908fee582c186322ccd540
SSDEEP

768:AHk5NU/s/u01RyBNheZw7nHhNM/RuUFprLJjO:AEowzRcASnHhNM/RjrLJjO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f26cd2273977e956a9905ca16f7557d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7c907287797f58f100eed005a318df17

SHA1
30e853aadd30bf1cbb59cfdee843968bd7b27439

SHA256
6b7172ca9437fe81632132d5c660c0009738d81d71496189362755eddce94739

SHA512
b6260ff1443b35820ba1efedf72acea6e294528de91fff2321346bb5708ca23fef97af056ae142a6faa716456869f05f41042f3d5d0f4cb4a3e077f348c0c1c3

Download Submit