1a0716f698d3c9e2ef8fa646f1aa3525ba9a8f9ea182b502a5970d9ca583e91d | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

140ffc2105abd6f5767ce8ecf7219fa0.pdf
Size

33KB
MD5

140ffc2105abd6f5767ce8ecf7219fa0
SHA1

782423f3cc554cf3dcadb45c4617fac31d7dcd12
SHA256

1a0716f698d3c9e2ef8fa646f1aa3525ba9a8f9ea182b502a5970d9ca583e91d
SHA512

58cf4fc8630802c087b8dc27fe922968bbc5d4398f961b6433598e932648705a81fb5d4d03172b433e4fc39f146b990392f76fb7559040603ff36dfe2f1c6aa2
SSDEEP

768:YplPpexSd2B9FYzUlG4JZiFPQNKU/voAOhY7:IISMiziGEZilYnlGY7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2644	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\140ffc2105abd6f5767ce8ecf7219fa0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f67b8ca986275021d321bc873d784a20

SHA1
b4c13250844a3136d949e8c63e82ae16ba6fe399

SHA256
da3c151b93d08c783d7899a35ec4f2bccc0d76d822bd88d5fdfa728ee3b48628

SHA512
2442683fceb0a2841b0ee2cefb7603e939f78ac840d59e8beab934c55686f0489bab1df128a4f2af4a53d6daab9ddf85fe9b3386d1ee367ae2611fb72f4f11b5

Download Submit