9ebdf7ceb56abfcefceb6f50cc44b5e10329e0840e8fdf860b310c4777442d99 | Triage

Analysis

max time kernel
122s
max time network
133s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 23:41

Sharing

Report Analysis Logs

General

Target

205bcaa1cd51d895718534d773aed149.pdf
Size

33KB
MD5

205bcaa1cd51d895718534d773aed149
SHA1

ab21b97de631607492a9cfcbc588095f96dd8c6f
SHA256

9ebdf7ceb56abfcefceb6f50cc44b5e10329e0840e8fdf860b310c4777442d99
SHA512

cf270589db57043d429400d27851163d6538a912bd48f19a59c704bf154d572b6acc30ad9f1490895e3ce0606fc623f193249d8a70f245d29054d755537eaa62
SSDEEP

768:KH2aaJBwEzsT4QaoIowvLOIpa0riyNG3I:KWaW/zW4F/6Eak1G3I

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1272	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1272	AcroRd32.exe
1272	AcroRd32.exe
1272	AcroRd32.exe
1272	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\205bcaa1cd51d895718534d773aed149.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads