95cb192e3a1b1fa8d93835a31aa4caa68d9c19163acfdc9783c3cc8b96da5d1f | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 02:11

Sharing

Report Analysis Logs

General

Target

0b362b034cf65e05833b1257507f65b2.pdf
Size

34KB
MD5

0b362b034cf65e05833b1257507f65b2
SHA1

571e47ae4876ef2f39f03a8724ca1995d647ff63
SHA256

95cb192e3a1b1fa8d93835a31aa4caa68d9c19163acfdc9783c3cc8b96da5d1f
SHA512

c7397ec90eb761e75809eb88e3cc145b5ebe994d6d6693bc7e82c6fa1af29fefd6461f2114f17e8de0ad5daf0102871fa11786d84bc0cc70b7c54d7b7ce96811
SSDEEP

768:V0NzpXStzLJz2euj4lPtq9yi8jXnkRWZ32:VwzAtzx2eujSLi8YRWZ32

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1696	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1696	AcroRd32.exe
1696	AcroRd32.exe
1696	AcroRd32.exe
1696	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b362b034cf65e05833b1257507f65b2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1696

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c880ee726cfda3b98801022e222c84af

SHA1
312712fdbc8c239b88ad8269494d6c5051441c69

SHA256
27376227c5ee1f08ee38735fe6d75b826e5b84a61e1f04254f45e30d0b2adbe0

SHA512
3f9b37c79a1c9d0d664fcac3251c5da70551d446536bae4b419cec6a7b36a597d4250bdfe898e8dc643742a901e6a7566ed3147736b0450fc6768df9a903de4a

Download Submit