506c0aab5f83e8bc2ffe3b33027a3ef1e0809f51517975a3304acc35c820a40d | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 07:50

Sharing

Report Analysis Logs

General

Target

129bb425016fadd683670ed9002d0be8.pdf
Size

113KB
MD5

129bb425016fadd683670ed9002d0be8
SHA1

fb4bcfbd245959fb26fbf47a48587ab24b14416d
SHA256

506c0aab5f83e8bc2ffe3b33027a3ef1e0809f51517975a3304acc35c820a40d
SHA512

afc143c7628081ea253885a1abf5d34d1262002076aea0af6ec05e46fdbf3ecfbd42a059e58c010fa1b3629eb4e2392e3a708b36db56408036b33fd8c0736044
SSDEEP

3072:KWZYaGNppYsUgssnL+KRI3YUITubC9uDhVVqqT:pDA7YsUTsnLduYUIiF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2944	AcroRd32.exe
2944	AcroRd32.exe
2944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\129bb425016fadd683670ed9002d0be8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
be7eb9c5873c03844401fde9a47cf208

SHA1
7a047e9868af9024f808bc43082248ba37a37311

SHA256
168314baa1ba10d3de473a98cd443dde42dde187eeab17314b63ac05b669be87

SHA512
4a6ef75aba3a86fa5ed34379971598325e2c963f394b8bc0b9a4f85c631e83f251e992cee1d8df5922b34b5160e5da9c95a3b2a89c35ba51528d4370c2e93a4a

Download Submit