02458cbf10f00e33f524d5b7e54b2272453a2479436641942113e60b986819e3 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 06:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

117bd1d14769e1c25469391e155fcd5e.pdf
Size

34KB
MD5

117bd1d14769e1c25469391e155fcd5e
SHA1

7a577497f96e752af817d3cf085c7744215a33fa
SHA256

02458cbf10f00e33f524d5b7e54b2272453a2479436641942113e60b986819e3
SHA512

91efd4c2ac3cf6e390f30819443f4c98f6703f1c00cec253aa5936cb5a92ff691e48ba7e28e6377a3096ffe0f447964e6e054b3a92c0b266370cebb127fd24d4
SSDEEP

768:AN3uy0U4szG766fRVs5tUhwpLkOWdXe159nLYb5g:03XkV6qE6QLkO+u15qb5g

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2000	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2000	AcroRd32.exe
2000	AcroRd32.exe
2000	AcroRd32.exe
2000	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\117bd1d14769e1c25469391e155fcd5e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0e81a4add97eec5e51dc2995d41c2170

SHA1
087b8ff521251b13f43e6d33ceb592ce33e7c8ab

SHA256
58f5f67e3d2d040f30822a20089c4b77bc42f1c2392b68af045a381178cb0992

SHA512
6b757bd4f0a41e56592c675b7e171cd9b64e5f8011b4a10e1bd65d5619d2af6b4fdfe2f86fc679dee64fa20dffe2489a4c95fb8a3130890fa32e6f7ea3fe1e8f

Download Submit