8369d0bd650cb14c139e26661a511156cf23f0941ef9a225325f229a86ae066d | Triage

Analysis

max time kernel
122s
max time network
140s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:12

Sharing

Report Analysis Logs

General

Target

1b96f3ec49a8c54dab58179249110f8c.pdf
Size

37KB
MD5

1b96f3ec49a8c54dab58179249110f8c
SHA1

58447fdd13f22850ce50e57b4b55c7e2265e8029
SHA256

8369d0bd650cb14c139e26661a511156cf23f0941ef9a225325f229a86ae066d
SHA512

1c243196c0a9ed3376702c5389c629c0903484032f04687ab3ee90d450efc2df56efa706935d4d23b4dfee21be4da7943bb7a421b4b99b71cee83637efcc8b4e
SSDEEP

768:5JtG+YystSUV6zT3XH2cT3bKUpwuVVfd/AJ1BRoJa:Z9sFiX53XnVVfd/AnBKJa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2740	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2740	AcroRd32.exe
2740	AcroRd32.exe
2740	AcroRd32.exe
2740	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b96f3ec49a8c54dab58179249110f8c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c401f385e0d1716ab20c4b962f51cd21

SHA1
44b56bf0d4016ed230a5ef62acfc5e13054d6f8e

SHA256
9c94d072c81f5274261167b01134d71700f21f69235c638a241963d6270c70f1

SHA512
a838894174c3b6daf20900ff54a1a95a55827de76fc0009d62e34d8c432af59fede1ae37fc1427b1435e8d4adbec7c0551d76f072937a3e4aa8a4a8f65a1efa9

Download Submit