d17b13ebbbca3e7540858fadbd081d64ac061bfacb771831e4edb8c91a17082b | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 11:18

Sharing

Report Analysis Logs

General

Target

16f7f019f94cb6f301b727982d820b0b.pdf
Size

2KB
MD5

16f7f019f94cb6f301b727982d820b0b
SHA1

84e093f545d0343ff99a4e7e18a08b82c5f554a9
SHA256

d17b13ebbbca3e7540858fadbd081d64ac061bfacb771831e4edb8c91a17082b
SHA512

c972e8b440a0484c51b03049b2165ae7dbf701ee2c335aee276f005853a303005e42962b809a4e508b4a1b8034e50d445b837c7ae97aeb72bf88021e58585915

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1684	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1684	AcroRd32.exe
1684	AcroRd32.exe
1684	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16f7f019f94cb6f301b727982d820b0b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
81440a1a21c23abcda9cf71b121fc0ce

SHA1
046a245ca43cc4cd91871c7b2357b25fac22f6d8

SHA256
08221ef682ec886c1c04c3f256b72668a297845fde228db9ec97e31c153d6c68

SHA512
66b6c436c7574ed65b0cd6a06b891b8de55141267e7f07fd36be36c4e351c07736f3b6aec8aee55b91aff6017449438f07df75405a9b7c90061254b71e0cc515

Download Submit