291b712d5e252d7aaabc822f18e8103a967d88474cf9e46e0238580e3455cc68 | Triage

Analysis

max time kernel
149s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 02:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0ba6e2e876b6c086b301905c513d54be.pdf
Size

108KB
MD5

0ba6e2e876b6c086b301905c513d54be
SHA1

e9f51d1d6744943e519bd7cce879e26dcacb6e7e
SHA256

291b712d5e252d7aaabc822f18e8103a967d88474cf9e46e0238580e3455cc68
SHA512

54285ce02b8eef59772235d1bec6035a33c8189ae431d84d0628ff3dbb7098e1e08f63283d1a6dc4c6ca3f7076795e48fcba45816f845f9d386a81ee72c12334
SSDEEP

3072:IOMb0G7Vb1OkmMGs7JS67kbh2K+7MEtmC:IFb0KVbHmLsIGYY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2288	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2288	AcroRd32.exe
2288	AcroRd32.exe
2288	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ba6e2e876b6c086b301905c513d54be.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9226aa0822d81884ba2ab665f412b0ab

SHA1
59cc45873b741f40785c0fc2d41e63fb7c01092b

SHA256
3713f8b2b78b1a52e3ff146fc1335e49f31c2dfccb876055db2ebd14a8f51e96

SHA512
506718d0a99ef6ae0b9e81ea7a08d5624f298eb260a1a41d2d0cf922d912c169616a926720dbee7c0d461dc6353f9d315d299a50d25298d404345c26d9abff62

Download Submit