051bb1391b2cf44b0f4c54d50eb7d7e405790e07ca8d9cd6ea74388293f486f3 | Triage

Analysis

max time kernel
121s
max time network
137s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 13:47

Sharing

Report Analysis Logs

General

Target

1a7e85603b9559feea71942eccd303c6.pdf
Size

35KB
MD5

1a7e85603b9559feea71942eccd303c6
SHA1

d95ea91cc0836b28ea0787d4be69b4fb7cd3e77a
SHA256

051bb1391b2cf44b0f4c54d50eb7d7e405790e07ca8d9cd6ea74388293f486f3
SHA512

209b282b16afcb9a3a7892f3d5050ac65eb4616707c53d84cfa66aeaedc7e40a46c4bc37747209fd33b16a7ebca84dfdf4b002cdf70e96d1a171c5abfa4ba208
SSDEEP

768:GghWgoQTZnYzD8ZefpwAbUmAQGg1LCi6+ST5t5Eqc:EdQIDQ0pj1D2F+M3Eqc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2824	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2824	AcroRd32.exe
2824	AcroRd32.exe
2824	AcroRd32.exe
2824	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a7e85603b9559feea71942eccd303c6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2824

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
edb03f93cf1ecf7f7c730cbf699e18d6

SHA1
7cc8e8f119962616d768aad0673e3b22338c6560

SHA256
d294e2c09f94e1cafe5201897b1dcb0ed9d001903e29ee3f9d0e854b9ebc0573

SHA512
1b41a9416ca2099bcc3c366919215ee6fafd84921aa9d386491654c7fd3c07175d7c21c96a1df63777de8a40cfb16aa777f6dc4bf32dcf4356a9f3c786641383

Download Submit