38b275619149b5915d0f2adb76e76b917b9ae48857ce260ddb2ba3ef4135cbda | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:36

Sharing

Report Analysis Logs

General

Target

0eabf3b597a46e8961e73a5f72abf383.pdf
Size

55KB
MD5

0eabf3b597a46e8961e73a5f72abf383
SHA1

33618dd2ca57e19f209fd238cf5b229f8ac14b9d
SHA256

38b275619149b5915d0f2adb76e76b917b9ae48857ce260ddb2ba3ef4135cbda
SHA512

739764bf79c5e373f1a8fd8ae389d8f4e464b1adc1facbebbdfd693360b6f6af6b715ccfc03dde29bbe961d4ee2fd9525964cc0b253ec6a6f129e30342eb499d
SSDEEP

1536:wSMtMbFQuFjlovvN/DZroKaoIFuDiFHcF:jTFvFjlovvN/9roloIF6iaF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2264	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0eabf3b597a46e8961e73a5f72abf383.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
68854280e8df42dbac2a594d1df3dacd

SHA1
2d184bfb354bd166c11e839e1e0c01988d1786f3

SHA256
e2825c6df5bdfd48858444370490a50c7b790db996f06bc24aeb33e91c51b734

SHA512
999d9b478562ae3b88e5ed2bfbd5760103c06c2b144e13a39b40e45f3143f4e221c70e369e96008d9a096ccf63f359c5e9543f1bdc17c85dc0e1932d7e5dd918

Download Submit