fb5cb073a267e7af49eb16f600056fd326e8b654b3db94b34c64ae1834af007d | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 03:17

Sharing

Report Analysis Logs

General

Target

0cb602db856e0420125bc6b908cee6af.pdf
Size

34KB
MD5

0cb602db856e0420125bc6b908cee6af
SHA1

6b5deb7d1a9893997f72071ad1e3b30622a16384
SHA256

fb5cb073a267e7af49eb16f600056fd326e8b654b3db94b34c64ae1834af007d
SHA512

5afc45f4bed0a3b7a8ed70995bf04eda25b14689c7e3af920fe3e28363165277ea6bbcc1975739b15c57e4e251eb5b50853ccf5028b2ca94fb505836a71691a8
SSDEEP

768:gnx3kYMAUNtcsdrC4CVYbqiDsr/a/ExNhknpfz:yx3kR1xCWDDy/aMSpfz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2360	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2360	AcroRd32.exe
2360	AcroRd32.exe
2360	AcroRd32.exe
2360	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0cb602db856e0420125bc6b908cee6af.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
cbf50bb362b1d16e28cba5818ae1f7af

SHA1
b9eab430fdfb1fb0d3a0cdaa78e331e8abf9598f

SHA256
4406736cc30ec03d640961c4a7571550d2b59a864b5f71e611bad2bb1a08995a

SHA512
8ccde77ae751201fcc88db9695c6e8a0ef9c44274fdf0f8cb1928e4f1b0e833cd9a52de788a9844530833feea68bdd9855976fc48c7d738e80b2005dc4d6324b

Download Submit