266d9947d27255bfa5117666cb87cf5fff088f0f19eeba38834f17d331a8f0c4 | Triage

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 05:39

Sharing

Report Analysis Logs

General

Target

10327f072678722c400fe6c86ee077f1.pdf
Size

48KB
MD5

10327f072678722c400fe6c86ee077f1
SHA1

6cabd50b6aeb2815fcb3df22a3c6b67e986d35b4
SHA256

266d9947d27255bfa5117666cb87cf5fff088f0f19eeba38834f17d331a8f0c4
SHA512

51ed23e6e41f3beb3cbf544e9de70211399a92196139952da589f95cf9ec7353416213538cfb956f83a453cec581bba56f4cc67d965e731a43c871024362b2aa
SSDEEP

1536:mDnvxZajr8e0MUbY/pvrmaf9pHClgWYwF:SnJZajr8e2ERvrf9mF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2856	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2856	AcroRd32.exe
2856	AcroRd32.exe
2856	AcroRd32.exe
2856	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10327f072678722c400fe6c86ee077f1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2856

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e1378554ad7d38211294778c68328a68

SHA1
05edc01ed477aca0c127ca6da0977b0939b36c72

SHA256
697f2cc720b8e66ea31e902369677029217e2d4e6317ae274bacb670ed32603d

SHA512
9247524797802c116962252b3dce533ecdb0ebbed2bdae82e79a4b9af078088aa9ae7d6df8925ee856ae09d6eead756c7593e49a892464373ed7601281e3b5dc

Download Submit