ae88b0ca434a909ed99c26656e9a4aba13b1da24719a71e6674fbd4c8a22bd36 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 05:55

Sharing

Report Analysis Logs

General

Target

107ba3f7e982d52ea1eef8a2209145c7.pdf
Size

36KB
MD5

107ba3f7e982d52ea1eef8a2209145c7
SHA1

55dc1d6025538eb0187a6c6eea52474cbca39752
SHA256

ae88b0ca434a909ed99c26656e9a4aba13b1da24719a71e6674fbd4c8a22bd36
SHA512

a658a530cd5e147251b11ee7c8aea06df6040b6d264532878948414123e8ef20bbc6fa2bb9dd9fd446ebe1b60de18a962ff619f9964a063897873af5be0ad022
SSDEEP

768:kVz4GrJ1s1WFBOVF2pJwCpmcKw9A0/fYY7Em:kJ48AWSVF27hpmcKAA0REm

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2712	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2712	AcroRd32.exe
2712	AcroRd32.exe
2712	AcroRd32.exe
2712	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\107ba3f7e982d52ea1eef8a2209145c7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9ea156db8d5bfba7871082ffc0409e4d

SHA1
ee8bcb323eacd19dbc44bb0babd5028398847c52

SHA256
4e9baa044ac55a1cdffeecc4bdd5f9a7ca2e906638f2716c295d50f9f168e004

SHA512
ae019af3a2f1327878daf56bd9f32bdc4b88cdc50cf1a4e96613f17e0f6ab00fe765ef789ed573841696bf2e0bce60ccd8e5b9981a7aaba6e926413c52aef744

Download Submit