9554b08849c1ff2d4d6d74bbe1f49ecfd7d8a0c54bd8903ffafd5df21d2665a4 | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 07:21

Sharing

Report Analysis Logs

General

Target

1201354146bca1cf651f5eb2176b3756.pdf
Size

70KB
MD5

1201354146bca1cf651f5eb2176b3756
SHA1

081a2932302444df72034bd6b5eda3b6d45f4d92
SHA256

9554b08849c1ff2d4d6d74bbe1f49ecfd7d8a0c54bd8903ffafd5df21d2665a4
SHA512

78f2e5dbcd3e56c2dfe376b609c640134d55ea2c6000dee5e79b5a418b747eba6cdcbd55b259e6180445e7ff06c7e2a2f0c78302342dc8f90bbea25d7304c7e7
SSDEEP

1536:cdakv4Q7y8+9tiSNxWWS5y/NvWOpOaZIdZEww:j24Qu8ON0mAaZsg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2448	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1201354146bca1cf651f5eb2176b3756.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f077bfcd98049b4a634163fdd27f80d8

SHA1
ee1360e749e34469884076986b0c7eb305567f60

SHA256
a5f499ec29a6d617d898cb61f458351b13316da1f935640b58f78e48241a9ac6

SHA512
44bbf5584337e2f4fec7808f66f5ecf7f3b709a48ef52b87e4cfb4c5033043c6142c0b5bfbebbfae2649835a47427492d6000f2f91d7f7533f2404232ad5fc50

Download Submit