f5ccf8c1d6b16c0a00ce42f2e49df022a3bd141a10956ab4e5328a01fa62e86e | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 21:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1ccc2090e0f1f95346621eecbaa5a5de.pdf
Size

97KB
MD5

1ccc2090e0f1f95346621eecbaa5a5de
SHA1

ffde00e10402306e31a87242dc730e59ccb8e67d
SHA256

f5ccf8c1d6b16c0a00ce42f2e49df022a3bd141a10956ab4e5328a01fa62e86e
SHA512

8eee7f42e5bb4c1d875a96d537020913c671f5fef3c66f4836030650663b721aa267fe49a1f81be9fef2f4cad6392479631a148af6d67b8e9b05cdbc558094cf
SSDEEP

3072:ZhDLHzZer3Noul73LiY18/h+B26zQTFWN+1wrV6+2ys:Xjkho8bdq/wpzQp06JB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2348	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2348	AcroRd32.exe
2348	AcroRd32.exe
2348	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ccc2090e0f1f95346621eecbaa5a5de.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads