d7157f23ae03072d5ebea74d387aa2a07343ed9eee5e908626aa02a861192fe1 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:50

Sharing

Report Analysis Logs

General

Target

1c329c55728f87a2e330bc845998f761.pdf
Size

34KB
MD5

1c329c55728f87a2e330bc845998f761
SHA1

c67961c11b64277b5c8fad91da79c9eb1e3e495f
SHA256

d7157f23ae03072d5ebea74d387aa2a07343ed9eee5e908626aa02a861192fe1
SHA512

82a98dc50d0746972bcbc4df5116e2e445d26ce6dea8d5b0fd01a70d1a67632c3076a0886c683afcc236382ece33c48d8571912d56ff7c548a213cc8b5a39ffb
SSDEEP

768:+TbZSViAuss7Intm6wliKiOMtp8cTOSrlg1gVf:+XNAuInA6zp8cTOShbVf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2392	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c329c55728f87a2e330bc845998f761.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0024f62f24b60765955e0e769d848a5f

SHA1
a2955dea92bbf0846e24eae8a521ebdf83458a25

SHA256
d61efcd0bfe453db11aafef55f55abf317d312ba642e38fb53a7ea28e5761936

SHA512
daeff94812b52f762bd1f7312d6162f1bfb4f4303d90e71cea6fd0e74ce503489b98aff52b4446aee06c6578b7293f4222f97764ec9fa975d08283091f182be1

Download Submit