a6191b54275a28d52e21c4a27530d002e9917f56fd853c59ee6745130ae97b1f | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 08:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

13aea1f28c6fca4a34ff6996fd1cc223.pdf
Size

102KB
MD5

13aea1f28c6fca4a34ff6996fd1cc223
SHA1

0cc16bcfd9ae51d95d3f2f914c11042e3c4f17d8
SHA256

a6191b54275a28d52e21c4a27530d002e9917f56fd853c59ee6745130ae97b1f
SHA512

ee2f1e44ea35b3f5b607e6e8cedf87aead98493146730fc9fccb0ddc944aecb45b291388cd77973a63269c0fc72fc22781ba7f15dde6f35e44d7f5e638074b11
SSDEEP

3072:lmd75IOkck2/pl8Eby6RUxLrM/eFdQ3GYxd:li9jkApCCY5M/ey

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2028	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2028	AcroRd32.exe
2028	AcroRd32.exe
2028	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13aea1f28c6fca4a34ff6996fd1cc223.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e1a70cd92773e44fc47c3d2786592a51

SHA1
b1e4598c89c511158d3315655fcbfb1ee22cf917

SHA256
1b85802f5c8a1055f98a2a4ba5081b9587a7ed23255a586487998faea1c0d62b

SHA512
ca13afa65b80137fcc45b59d972a060319703e0cbdaca0d6c33e4fa020b4fef298b626139b8ef396bc7af960de9820c8328544fbb9f28dc62b8341bc07312be1

Download Submit