138c6ced8588db18d1c05c95812c9643442613455d1f0e762deb5a19e0e97f74 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30-12-2023 13:40

Sharing

Report Analysis Logs

General

Target

1a5380cd7cbb670b6fea9c69fa81c49e.pdf
Size

100KB
MD5

1a5380cd7cbb670b6fea9c69fa81c49e
SHA1

21601229b3290ef9266be9b35adf8ff331fd0a3f
SHA256

138c6ced8588db18d1c05c95812c9643442613455d1f0e762deb5a19e0e97f74
SHA512

8b0857cbeff85711778cc76dc22b4ab30a815fa8490265e91417cf06f9cf1f8e114a1e6db2292357a1c63c3c36738cb8217241f892c0218e20af615db157efab
SSDEEP

3072:yDIyw4W9z0f3nj0au+ts7WB58nzUwPOYKeQb/d:WIywR9zUwzoynowbA

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2008	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2008	AcroRd32.exe
2008	AcroRd32.exe
2008	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a5380cd7cbb670b6fea9c69fa81c49e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3ae351fcbb0b306572ab18dd47390066

SHA1
a2cde54f8fd7fc788f9d8a199d176db427fbcb93

SHA256
389804bb7b6a135091d207eac3887bdc09b57b0e50065f01684f6ac5aa6cc470

SHA512
f241ff58feb7cd8c12cf0cd3ab4c47c32bc4e3e7fd155f5e795a2cb2168b28a2917181a720230c93c2e8744aea191104e04f0c176e7af1ff5f397d6547b4b00d

Download Submit