b9c60a4396157b0bfa51b4f21e81408d546ebfb12c8ae00a11b64eadfb12aa66 | Triage

Analysis

max time kernel
118s
max time network
143s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 10:53

Sharing

Report Analysis Logs

General

Target

1680fc61ef098181b258b91766ecf4dd.pdf
Size

103KB
MD5

1680fc61ef098181b258b91766ecf4dd
SHA1

e942bbc007920ecedfbe74d6713983cee7218b76
SHA256

b9c60a4396157b0bfa51b4f21e81408d546ebfb12c8ae00a11b64eadfb12aa66
SHA512

8acdd46213ba6903cdd4eb72d68d6f46fecd18538325e5741deafd362642e5272f7f1c4bd07976fdac37e47d7b68288d5cf71152f20c509237cba139f71e07da
SSDEEP

3072:q6DIHv3Tu773zK0ovaIwaaUf+OARBoYuj7tYC1:q6Dov3TuvjSVzfBj9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1756	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1756	AcroRd32.exe
1756	AcroRd32.exe
1756	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1680fc61ef098181b258b91766ecf4dd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b47c8428441238755b8af1a47cff6450

SHA1
3b4438347514b63f2ea44281fa44fa9fe23b9a5f

SHA256
76370daa7da0df25edb8e5affda0ff65e8bcbaadb7a13aa66501168337012e0b

SHA512
a6018ceb97911533fdebf178125fc89b5faa9cbfd67001d68b1efc101544164990572e0394da2dc8118eba9791447aa2ac5754787448a06d26618950e173078b

Download Submit