e0944a69117fdb6e1e004db1cbad66764cd21dd3463f6397814f693ccb8162c6 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 03:49

Sharing

Report Analysis Logs

General

Target

0d7455cadb754af8106dbb3e423fca0a.pdf
Size

34KB
MD5

0d7455cadb754af8106dbb3e423fca0a
SHA1

af4b39dbab377b53b2e42f57b8f39d03a45f57f8
SHA256

e0944a69117fdb6e1e004db1cbad66764cd21dd3463f6397814f693ccb8162c6
SHA512

de07720c41ae6363bce4e2a2c4a983e1ef33ae28b34758b09dbd20b098d74e67a4457bbba9c6dc703f3a151348a33911ae33d9e7c58eb2159a231a57a5c7e60f
SSDEEP

768:Gbs1Gz4esHJZicNWDFTi3yVbtuaOKau9JkDmXu:GSq6b7+TE3ara/mXu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2104	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2104	AcroRd32.exe
2104	AcroRd32.exe
2104	AcroRd32.exe
2104	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d7455cadb754af8106dbb3e423fca0a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
073474170fc23b79d2b9aa3f60abaf9f

SHA1
3aa391ae6d10343e058dbc08eef64efe4da416c5

SHA256
479bf91e4a3180b1604a19b0de55ef388a5df8b8ab188c4b40b215cda45d0b2b

SHA512
e22a4583fa6c7d92eb658d1dae4864bce639000d3a0885f341e258317f6977d5ba3cf16ec345c84aa70a4ebe92679be47e4744e7ca399a8cc010b800e2fd42c7

Download Submit