37d9792917633017a2e3d52dfc9ebafad811e24481b6d9a5d99343a796305380 | Triage

Analysis

max time kernel
140s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 11:56

Sharing

Report Analysis Logs

General

Target

17b40714c463ed694b731f148d70ee49.pdf
Size

35KB
MD5

17b40714c463ed694b731f148d70ee49
SHA1

4a03645c110e1f51cbb6763e49adaf81e866b205
SHA256

37d9792917633017a2e3d52dfc9ebafad811e24481b6d9a5d99343a796305380
SHA512

a9166c400b7a7611124f92d7a6e1b05f1e5a49481fe53c6c95ff1cb91d237b9608d76051377e356d5a189a6a82396781361429e7aa0174655c8a45bb3f886c8b
SSDEEP

768:veDTV4ZvoApqrG8qiSnEMr7azRE5b6fYmhRQ2ADSC:G4+OqrLUQE5AYmhRQ2ADt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2384	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2384	AcroRd32.exe
2384	AcroRd32.exe
2384	AcroRd32.exe
2384	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17b40714c463ed694b731f148d70ee49.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0788c229102d8ea067e24e0b3a2946f1

SHA1
4b736fd4d692395a3b4639149cff8bb33374e6f8

SHA256
49a94facff154ae4a91502abdda761e497275d0e803d6d7edcbe5086dbd92132

SHA512
b52fd75396d86b37190a1ec95659aa073419ffb888ee51d8fd23870a2b863dd066c820cdb6102c5521cb45979b7b1ab8238f86b1268c7b94ed45283f393e41ad

Download Submit