ff5a22b50adcffbc84314d1797aac889d8425a73d889d7064d6cf54ad0204cc5 | Triage

Analysis

max time kernel
122s
max time network
26s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 09:30

Sharing

Report Analysis Logs

General

Target

14911c1892fef187eb00b4a6eb6af136.pdf
Size

73KB
MD5

14911c1892fef187eb00b4a6eb6af136
SHA1

b5c61d6888b093c53bf46e39e054cdd169445547
SHA256

ff5a22b50adcffbc84314d1797aac889d8425a73d889d7064d6cf54ad0204cc5
SHA512

220038fa7f62cc0cc9bd5f9dce4aad66e719b101b7fa1e9e66e916e25fd1f49481036ff61ec58c76ef93d84a751c7562bb2befc5a49b3d4b9b7b49ef879855ff
SSDEEP

1536:TfWkIbVroNtt9M8x0j6NoBzn0S0bf8OUHmG2EYtilF:++N/NxrkQb8fmFEIA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2668	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2668	AcroRd32.exe
2668	AcroRd32.exe
2668	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14911c1892fef187eb00b4a6eb6af136.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
191c07dc7e970919a3efbb69cb22d335

SHA1
abcd9b10c0a9d5752842d0a56373523060c02991

SHA256
8edfd2730bae0b3af3ed052523e6c347b0402f76c530f6351e50e81cc2a79c13

SHA512
5d55bda8100657d6df7cd3eeef343bf65ad8e93de0c34b1a849d460bd7e23731cab22e53e04c72ca7d3d667f97fb221badc7a855b010891676b7e571a2ac5937

Download Submit