70fa302e9c4f2318f9a95c2cb8c86c60b32fb76d445c72c655023efb1bd26cae | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:22

Sharing

Report Analysis Logs

General

Target

145d4941d2b3fcc33a5391b6f4da6d61.pdf
Size

43KB
MD5

145d4941d2b3fcc33a5391b6f4da6d61
SHA1

6a4390677e598905793cb2d4ba276c2d4c5a28dd
SHA256

70fa302e9c4f2318f9a95c2cb8c86c60b32fb76d445c72c655023efb1bd26cae
SHA512

46214c70177c118f12e671fe636f9b366fbc0cd9f90c3687db03a80c25d1daf50ed0b078b77abd929fd2601e38fc786ab1019f044318894a8f39add9a059a4d4
SSDEEP

768:YUGYoLxOHGFZUNNCI6Y1b9P9K+CkVIfEjh0CZxbXSOU:9GYCEYofvjeCZxpU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1968	AcroRd32.exe
1968	AcroRd32.exe
1968	AcroRd32.exe
1968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\145d4941d2b3fcc33a5391b6f4da6d61.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d044032331f1599bd9d06e63f929a132

SHA1
1c3c246ae6016237ee575b3dafae80e95439d4cb

SHA256
670135ac9db5eb144d3fed3a12314b4b9b551f8d9f670d3481f75faaf15868cc

SHA512
f3a8b4d96586af54b0cc0400ce2e8e3a8c2ee78817258422d162f411cb68e010d169686d08de8f49a1a87d96f2c7fa6f87118d19da97d156e05cb088edd9568d

Download Submit