1386fa912b1dad5e3eaacc24bf824c3527f125692b427ab54c24e827136a63c6 | Triage

Analysis

max time kernel
118s
max time network
141s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 00:15

Sharing

Report Analysis Logs

General

Target

083309731b350d49fe528f1828acfba1.pdf
Size

36KB
MD5

083309731b350d49fe528f1828acfba1
SHA1

4035736d3cef713d3a08882a0693bc0fec5987a1
SHA256

1386fa912b1dad5e3eaacc24bf824c3527f125692b427ab54c24e827136a63c6
SHA512

6b3334185b8cdc4bbc11c9fcccc8f8a8b4925195f87dc13e18664db39778c1891991ea0351224b250db6d06570d0e52ee12a7f9cdd9efb11a8d9f059d9bf7071
SSDEEP

768:kRr/OElnM9sXX9nwNoti0PQ11n0bjcLeGuDFq0W:IrNnwNoQ303cL8Bqr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2768	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2768	AcroRd32.exe
2768	AcroRd32.exe
2768	AcroRd32.exe
2768	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\083309731b350d49fe528f1828acfba1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c64e2cabb3628d960042c364b9218c9f

SHA1
b994d14ee83d4dcca76fa524374456f19ef95e74

SHA256
f27c12bdd391359d6691e534afc880b5fa91c28a59c31a5cdc4f12b0aaaff710

SHA512
91aa50044b5fc04023cc70958eab9e6800bbaaee3ede7dbf97d66c9d536f891b7cceb786d03e5eaa8000719c4672e4f9c3ff8b3ab7ed6cab83ad845eaa9a5554

Download Submit