3f1e30e601783ea1147b8265232a7c061619fe315bf533f57b45a4c15721dedd | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 04:15

Sharing

Report Analysis Logs

General

Target

0e1d1a46fe6d07b7f4eba0ca2009a005.pdf
Size

67KB
MD5

0e1d1a46fe6d07b7f4eba0ca2009a005
SHA1

1d2b23d459d4cf72d57fe736b627068f7c36e1ab
SHA256

3f1e30e601783ea1147b8265232a7c061619fe315bf533f57b45a4c15721dedd
SHA512

b6295b9aa73dbcd8dc882fbcbe7dc14f61e6e3e662adf7e362eb4fa23e35f7b48a8553ec7ce4708b8e5f14e124b9dd33f45f432655a5e2cf72a0236c48170fd2
SSDEEP

1536:3NP8JgEiX067TfcVR+dJVbaXEVCQz4Uej91Cua:pXVPcVRWza8z4PZ1G

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2020	AcroRd32.exe
2020	AcroRd32.exe
2020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e1d1a46fe6d07b7f4eba0ca2009a005.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f5f236c96231238b916130c55be4d0bb

SHA1
11f4df34f0889f2449fcb27abbfd32649fb8845e

SHA256
464a74aabca6903dc142c6ca0698b245dd9cd22bae7da5b307cd9a29821cf646

SHA512
06f592a9b0e47772168810b4008fcc9268fb529cab200614f75d80fb3881150a597aa9c0df2996973443cbc2c8b4d6360809c19fe87b08aea1c80881b11a3d9f

Download Submit