6568b1575fab5513b76d6ac0f522b0235ace8485b468e5549b3af7edc406787b | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 03:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0d7ad00dc3515e642ece5ea0dc98118a.pdf
Size

103KB
MD5

0d7ad00dc3515e642ece5ea0dc98118a
SHA1

b80082967d1a962aadde133ec930b35b10b196ac
SHA256

6568b1575fab5513b76d6ac0f522b0235ace8485b468e5549b3af7edc406787b
SHA512

31d1ecf349bcbc9c0d92e2291e2a50b29ee841678a10ba497471741e040d3870a3161f1ac7db21829c863993e3632517c3d402db17046334e1767c74c56838da
SSDEEP

3072:25Z4Hs+QuRQMHPju6S1B8I+TN1TsA22BmkUbze8:2n4Hs+9Rn7u6S2/TdBi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2508	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2508	AcroRd32.exe
2508	AcroRd32.exe
2508	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d7ad00dc3515e642ece5ea0dc98118a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
12cb98f792b87e8d18cf3665e13c723a

SHA1
76e0eeb61e1b4f91129d2bc3807f5556d95fc272

SHA256
24e6ab0e223a3076cd88b1bc33be54b2263cd2ed14a45963276bbc777e636466

SHA512
fffa3afb05dde307ac6709756b72d7c318546ffb7f7f03fea98d18c3c3ffdcc1425e700b6ad9ca94dd8335ec4e8826fc00651428f1f35f0813957bdb41404ec5

Download Submit