e7681ea5b9420a6467d1089bfe615d7661d555607bc2b37e57e8d269c9af93ae | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 01:36

Sharing

Report Analysis Logs

General

Target

0a48bd5f054f003af84815bc8ff8519d.pdf
Size

45KB
MD5

0a48bd5f054f003af84815bc8ff8519d
SHA1

d8969b082640396340121e671c35fb15009abdcf
SHA256

e7681ea5b9420a6467d1089bfe615d7661d555607bc2b37e57e8d269c9af93ae
SHA512

101c1fb027ae7746268dbc6a0700bbbf74add6e93a8c81ef8dc75aa57dda9c0268d98160440eb9597fe6229f3b6b6504c00ed21edd4ab416d8b891f40d98f826
SSDEEP

768:h9Xecl6gygAQdzgxpRbOkfYpEh+9oy/jP4lrvpB:h9XNZAQShf5jy/LOvpB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2220	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2220	AcroRd32.exe
2220	AcroRd32.exe
2220	AcroRd32.exe
2220	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a48bd5f054f003af84815bc8ff8519d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0dec7bfeaa0bc686882884be7f92ca1d

SHA1
8f6a8a124a783fdb99e68601a4fe3e7dd8cc5f76

SHA256
6e044c47e7b946e97639757056398066c15ca5a74c093e12401d6d0767b2e3ac

SHA512
c40c2df4cf35572b2d8c7cd0fe3dccae2d541c7382deb835596952a599b6d09dacef21d2ee21ee81a52e583d6850cd41fa06460b2eecf9add1ed21a2bd4486d0

Download Submit