b6ad854447f95374747a3a509b6fa2a3168c6ea421b720711848c74386c1a361 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 01:10

Sharing

Report Analysis Logs

General

Target

09a23aba8c6726d46edd0191ee5759dd.pdf
Size

35KB
MD5

09a23aba8c6726d46edd0191ee5759dd
SHA1

c832fda6d592327bca7144672a9f94fe2739714b
SHA256

b6ad854447f95374747a3a509b6fa2a3168c6ea421b720711848c74386c1a361
SHA512

020940f0264cf8debe8f0445a82f4153bc3acd77c053185812106810b84a30020e0a7d3c281e39ca5a9a5d1ffd48e2adb67bbc0f42ff81cc98052159746592d6
SSDEEP

768:EZozJjZ5Fttcsuh6N2ofcAuXTjjxlAoQb9Bdll73x:r/qzSuXTvLAPb9n3x

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2168	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2168	AcroRd32.exe
2168	AcroRd32.exe
2168	AcroRd32.exe
2168	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09a23aba8c6726d46edd0191ee5759dd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4991334252dc244aa95766a782e8a7e6

SHA1
cdf38ee82887ca67a8afcbd6ec58d450cfe7bfbc

SHA256
4455e623657ccfd040ffdcfda1e48068b0dcc1b8bc3e25f90ae122b0f72a7aac

SHA512
a61f2f97c7168fce812ff40861e694d6afdd3a4abfe60b50d077d155c9d73e3227644b55d75002ff5542e77c6b3258c9ee0006b469e88939b53595a3de423dbb

Download Submit