7813b8bb793d55e31707190c2df8da4961e9ec4d45a90a10bd63587f65b15fca | Triage

Analysis

max time kernel
121s
max time network
149s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:23

Sharing

Report Analysis Logs

General

Target

1bc81c2638f691c2473763caef205166.pdf
Size

104KB
MD5

1bc81c2638f691c2473763caef205166
SHA1

48fbe8da64de61104bbe1166c2b3bf2e4b9b57f7
SHA256

7813b8bb793d55e31707190c2df8da4961e9ec4d45a90a10bd63587f65b15fca
SHA512

9b91f0d061f57a5d6a180d757755bce65acc3e3b3230e0df847748bf2f6ab5075fc879e56dbc6c583f8f20bc7c2d86ddd95a09dcf39f1c7b578e04653c75b208
SSDEEP

3072:pF5eHPhgSWz9750/TS0LlcdH4FXsfD63WDOL:pF5eH6t5d0rS0LedHUXahG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1704	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1704	AcroRd32.exe
1704	AcroRd32.exe
1704	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1bc81c2638f691c2473763caef205166.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
200f208a2b3dd5639fd379144156e842

SHA1
831cf5a84bec8aae6804ab61691ce4aa5e96f444

SHA256
d08075533f14004f2cd89e4a350b0be7574b197e6d7304d2b312f65e1f254e73

SHA512
9e5869baccf7a3d09e2b3e26ed5f907c179c3eb56b19ee04da15f172401b5e6de4d06b7df663c7515d326c7542c5fa1264a635c036bc7534c20cfbefac2d04c3

Download Submit