fc219cd0692b513b563debe34c5ce3628e2723d831e8fcfb7cb8d24e1633048a | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 12:18

Sharing

Report Analysis Logs

General

Target

1845fb2a82bccb80e8eaed0a338a8783.pdf
Size

96KB
MD5

1845fb2a82bccb80e8eaed0a338a8783
SHA1

965b9f5dc64cb86b83f5c1d5021a212fc76bcffe
SHA256

fc219cd0692b513b563debe34c5ce3628e2723d831e8fcfb7cb8d24e1633048a
SHA512

b53c45a846787af26887e9db3df3bcfd88b8df07a0414d283f734b58a68a9c3a90decf0d831e8afe86fede0897e4a69bf577119a41af7816184308828f96725f
SSDEEP

3072:/rqoNCSgAssVrSaJcaWoTfbukCGQRyNEGz:/rqrSg1shSaJc5o21Ryr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2264	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2264	AcroRd32.exe
2264	AcroRd32.exe
2264	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1845fb2a82bccb80e8eaed0a338a8783.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0ad57526537baf6508dbf749398a5c52

SHA1
611c925f15751c7eb344864c43ede601bf10b366

SHA256
313770f19785848aa7617ad1ccd3316f2b0df47d001ce28e4dcdf4b1f07aabcb

SHA512
13bc55995acc1e8f6079f60b394687d9c1a4a8a8245a17bdc5f4e0da74d24c62bc4c4259ba0a99741a078ec532599e81ca941f984a3e7cb9c3f2cac505ad2831

Download Submit