36d26087fc77106c82c9a83dd2b2f3c2dc2534e7ca5ff40f7afd50767af400b2 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:30

Sharing

Report Analysis Logs

General

Target

14903013984afb315a1cffc58ba8eb5a.pdf
Size

15KB
MD5

14903013984afb315a1cffc58ba8eb5a
SHA1

2ba833e9fa893e56befe1f98008a0853174fb08a
SHA256

36d26087fc77106c82c9a83dd2b2f3c2dc2534e7ca5ff40f7afd50767af400b2
SHA512

7a5b483f70a5b2644cbdd2f6373ec565d3e85f1ed805f6eef510405e55524aa1ce415e0cd75929219e2ee07e722045a76f73d986607479810bb75a979fdd59a4
SSDEEP

384:E1/1bTopdwn0wah7vMCc49W+B5ls6jYUQ:o3oeIvMb44+DlsurQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2936	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2936	AcroRd32.exe
2936	AcroRd32.exe
2936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14903013984afb315a1cffc58ba8eb5a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4f1f8c080cc47388c00ad061f29ce5d2

SHA1
7646d66199560179a24320e0d6985d3ede44c933

SHA256
0d2e539f82340c5da2c3b6f07d122fabde4f929ef26b7bcdd94b5f2b43f935e7

SHA512
b1ab5f32c2a92cf2e67f7ac28f759fdeee0255d1cd72b7c3efececd97e2b5c4477d66b7bc28cf11989f5c0118c7323af89364924072b585d412f96dd7206b5bc

Download Submit