24e3a3078948c283a3ea55c276049c4bb03c861dfabe94b3a10ca07177a86054 | Triage

Analysis

max time kernel
117s
max time network
135s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 13:35

Sharing

Report Analysis Logs

General

Target

1a2ff28229ec16eb87d4efad2534ce2c.pdf
Size

35KB
MD5

1a2ff28229ec16eb87d4efad2534ce2c
SHA1

7a8e74cdf0798c416c594849f4efeab0a80d9f41
SHA256

24e3a3078948c283a3ea55c276049c4bb03c861dfabe94b3a10ca07177a86054
SHA512

777ef9221c7fd5172eb59ad1116e13c30d24edee4b14ca96ccb096fab19ac76fa7fe3143b45c9ad044f079862c68e0ed20f3d4f8feaf9777658ff9532239919a
SSDEEP

768:eGXA0Nm3psVqXbECOduKh6BjqeXjz9JJwyb:NHgdOUK+jqejNwyb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3012	AcroRd32.exe
3012	AcroRd32.exe
3012	AcroRd32.exe
3012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a2ff28229ec16eb87d4efad2534ce2c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
20065eec05b1348c53666a108d8c0f20

SHA1
98cbee02d97822acb94b60ec16d001b650a58c83

SHA256
7fb614ee57971f113ef84dab20c4aac0a561e4d600a3c70779dea0d26f3dcc3d

SHA512
7d83f16641146f6850d79c69e6daedf20e240bdf76de3b2c75d5d4c1da7d30014857fc65bc9a546fd1e1878d10d144859096e55f979ebca60e0d04ec337d51a1

Download Submit