5ade8dc076b72a84733aa1f6bc536a4f2dfb7cd33aa077b91a68f5021d69a70c | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0e04cd1c574e6031f3381e3b8fb8da0f.pdf
Size

112KB
MD5

0e04cd1c574e6031f3381e3b8fb8da0f
SHA1

c2ef07d1f2490bd0b243353608d44b4e273e2e49
SHA256

5ade8dc076b72a84733aa1f6bc536a4f2dfb7cd33aa077b91a68f5021d69a70c
SHA512

643ed3074b328f8baaf59affe3c0558d8d2dbf3e1ed09432a79bea059b20cc894d361fd0672d8984543867e21143ac6a0f1b27f5bc2a609d09fc87858e1c4e7e
SSDEEP

3072:GnZPOfOMw+SBR/BbVYZPo4YDZiIywiRMtQam11MJ:Gs2cSvAZQiIynWaS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1700	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1700	AcroRd32.exe
1700	AcroRd32.exe
1700	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e04cd1c574e6031f3381e3b8fb8da0f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1700

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3491ee7c73b414262039cf93b78af0c5

SHA1
c9874c58f8dd52b4dd8084272c8142351d61310a

SHA256
9d71dae3ee0cf1889b3d09790925f4e13ce8aeb75f6e697f6c6d3b7c73c074f1

SHA512
a7b6b870c5df98a22bd6f15e09dd4a57ea84d2c3d48498fa0a0c9adc9a5c22a895801be0384bf852c71ce667e3a56a6e84fd9d60dc365c1e744f83ff520a05c2

Download Submit