33af668fa04d20e63c9c03482870c7911e5610030a7b61653afa06b6ddee8f8f | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 05:43

Sharing

Report Analysis Logs

General

Target

1046c0c59c01339e3a930681baedaa43.pdf
Size

108KB
MD5

1046c0c59c01339e3a930681baedaa43
SHA1

2aedcad94c6764dbcbf4510640cba7045b8cf45d
SHA256

33af668fa04d20e63c9c03482870c7911e5610030a7b61653afa06b6ddee8f8f
SHA512

ea839208e32d7cf60b20f057bf008cdb2530be5d7187fda6d06714a6c6f7499d821f10040c1ab4afd2390133245c13b7d5abaf9236a16561ca1a094c4977e7b2
SSDEEP

3072:4m40jYitmKsxjV4OCBtF2xrtQDs2s2ofcgePn+yZn:4h0jYYgjVH6qxrIs9Gnv

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2412	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2412	AcroRd32.exe
2412	AcroRd32.exe
2412	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1046c0c59c01339e3a930681baedaa43.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f567749ec8638f4538f1f7407c278468

SHA1
b9b51d11d621ab20b3e97423c695fd5c89e4126a

SHA256
31a5f7e67d5e22f8867c2d8dea3c35a7927a2ac9651bbe8eb2106695ed5f5735

SHA512
a410375edbe5f4a122d1107516f2beee285690da11b8e8fd91319c437cf883288aa4b12f95450227f62e3ce465f2075891bd922e8c1d9a7e79a00b73548d2622

Download Submit