ae62da931b1bf7a1862f7464fe1b1ec43345824f09708b4e1bd47c985f228f32 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 11:26

Sharing

Report Analysis Logs

General

Target

171c77ce427533d7d5b80148844a894d.pdf
Size

73KB
MD5

171c77ce427533d7d5b80148844a894d
SHA1

aa6bfc7f0eb99511ee5f731d39f18ad076b136a6
SHA256

ae62da931b1bf7a1862f7464fe1b1ec43345824f09708b4e1bd47c985f228f32
SHA512

d8855e67ed12ec95e79806b4e5c7d9107a091976a340adeabab14ed193a030a8c59a999f437f44c9ecc86cab2a9f993e08b6a4becbeedeb2b872696f4ac533f2
SSDEEP

1536:PasivFj5mBFPcTJst/KzEZjEhmChSu3gvhMvIc:1mkPcto/XJEhmNu3g6r

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3004	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3004	AcroRd32.exe
3004	AcroRd32.exe
3004	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\171c77ce427533d7d5b80148844a894d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2e3cfb281ab809550256d71f1314da4b

SHA1
5e1ab116707fbd96d104d1a274ee6dd0a5aa8773

SHA256
609064b4410bff489ee00080deeb618d905b85c513802f8a99c1f3a450045ebb

SHA512
6b8e20010358e173155e4a3f03789099268df96b1b3eb6ab99d838b8181eac0287607e83ff5583987db2c0b9aac5f0f2119c32c4423cdb1f7df9a87e407d6196

Download Submit