cee726496d85ebfd61b8beecf2fff41c4b42f5c30dbef51e96c2414447362df4 | Triage

Analysis

max time kernel
125s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 12:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1926791d47adc4bf3d743d54effa9341.pdf
Size

54KB
MD5

1926791d47adc4bf3d743d54effa9341
SHA1

6c994854330040d7342d7b76f2a5d731dc0276f1
SHA256

cee726496d85ebfd61b8beecf2fff41c4b42f5c30dbef51e96c2414447362df4
SHA512

2280cd4975cbb37163518785a7255c7d45b5d5cf99f44d9cd8ced316ea6d0840b7be54f0405df02685432f82d5f57609a10dc71540f973dc10b0e175a964b309
SSDEEP

1536:w+rBdbavL9726spGtKqR3KsZABnhW+QsX:nHbaj972ktKRsZknhWcX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1976	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe
1976	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1926791d47adc4bf3d743d54effa9341.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4660dfb17b375c1f8e8ad5312922ee56

SHA1
989046c1acc9e9e318cb3e33fc0e6df481fe4330

SHA256
22255d1f9b169c468f2e3cc70aa3ff5aabc21e28624c7cb842afb0d34dd6490d

SHA512
c3e8daccddf3dbb7b71ec5510ad474eb015cd553c3bf8b295d627648bf80211b6ac8cac48d1d389945fa186a21f1fe677f4f58edbed20c03c5dc51142460120b

Download Submit