821ae40c81f3842ef7bf378776139fff074daf49cf409e265d85e7e3d998a27d | Triage

Analysis

max time kernel
120s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:13

Sharing

Report Analysis Logs

General

Target

0e11d65cca7a7dfcd50de6f42dc322f5.pdf
Size

120KB
MD5

0e11d65cca7a7dfcd50de6f42dc322f5
SHA1

ccefee8b0fbdc15833b3a8047933ede99f7c3e24
SHA256

821ae40c81f3842ef7bf378776139fff074daf49cf409e265d85e7e3d998a27d
SHA512

4c01f1e55f5b6f9822420a9af118fad65ce4d9f47ff72b97da64fd565d56128daab98f61c23fd6d251b571084a5a610acb2aa8c1c6f1aa1bb4bb647fea950a4a
SSDEEP

3072:i7wTKSKBiKCHRSMCWbTsJAMW7usiSo+ZdrTCZY:8wGdCUWbyWaJirrT

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1316	AcroRd32.exe
1316	AcroRd32.exe
1316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e11d65cca7a7dfcd50de6f42dc322f5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5dd28217063dd95b4cca8ab4315c8038

SHA1
5c74fa110bf46abf17da92bc889bf44529d10f65

SHA256
82705704a4621ee460c32b7fb6fba27140fe688dc2591111838f0676db8dad0b

SHA512
9fe3181c759d051664d5b8957340202d0d3e469af67515430f03bbef57c2244268d32f6195527c7e95d7e05ddfd9627b2f72c6444bc1370bd3f58394194b4fa3

Download Submit