e63f3c405eef62aa6b8bbfbfcf8ad05aa4f1a67cdac06405120d11b77795ecec | Triage

Analysis

max time kernel
175s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 10:37

Sharing

Report Analysis Logs

General

Target

16209dd0a3cb47bfdb665c4102cade06.pdf
Size

101KB
MD5

16209dd0a3cb47bfdb665c4102cade06
SHA1

18ae1e947871ac3c44e20f58b7e9346971d0f4be
SHA256

e63f3c405eef62aa6b8bbfbfcf8ad05aa4f1a67cdac06405120d11b77795ecec
SHA512

977963964b15f110d70edf2be6d366bcb1f50b7ff52a26548d6742f509097593eafe7b40a134944f3b4c10f6ecbcc15b182c1ded93a2e61db9a2c992c2e6ee91
SSDEEP

3072:ktKsOOuF1cpUQk7BiLPiIlvzvOCtMne52/abRB/EzOu:ktKnaUQdFu9Xj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2572	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2572	AcroRd32.exe
2572	AcroRd32.exe
2572	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16209dd0a3cb47bfdb665c4102cade06.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
067c7131cedb9b7fb557e328bcf7f507

SHA1
a3cabcbf9934dcc5e0428cf6d6c424d4e4814ca5

SHA256
6d6b6642f0de5b6f02a54b8f7be9a464d5a4006c89a7e6352db836947e06f3c5

SHA512
d8612d38be78683b39b7526722eef6b083124544b104182467b8eacb1fb14e2e003d6b686cae3c9e62cc1a38a41e3f54d8214c2b97011817a1e5418496fcbd14

Download Submit