a754acfa9d353e041349f0793913d9b25a047f25b0318db73e153abbdcfe8b49 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 11:57

Sharing

Report Analysis Logs

General

Target

17bffd303ae63ac4f40fb101024538a2.pdf
Size

34KB
MD5

17bffd303ae63ac4f40fb101024538a2
SHA1

c94854cf5cc3f0ab4d2e158f51a8e8bdd0d90c8f
SHA256

a754acfa9d353e041349f0793913d9b25a047f25b0318db73e153abbdcfe8b49
SHA512

057578b3ac26e39a8d0b52e5e95b945ba91c524c0ee152717202f1cf8a54e95ce283809cd61bf830946e8a3e9ed42db30966b285625b5d1947bf762708535a23
SSDEEP

768:M0IxoaEzjsH32bkPmv+RqeZuxykdslLwdIKTzk:M0ICaEzAja+RqecpdyLrezk

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2128	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17bffd303ae63ac4f40fb101024538a2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
60c149866a706d96ebb287425924f56d

SHA1
69609e6e10f3d2bb2550d5a2104fdda617696188

SHA256
0c2147ef4b480d7db53bfcafb882b0ff24a77a1b0812c7409c9e342a0b5b401f

SHA512
6907447bebecf4dd89c238d890204cd95027059cb5f7b0b865a9722be7e5d5c5ec173e1cc69498a71d2645ad1fd2f32c0bee5455d635bd9e9582fe45a97da374

Download Submit