2760826d4e2a88557dee17d09546997c9134b0c71eb76dbff1bb867c9ce64a01 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 21:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1c6e57276cac5f9be07ed33a1f4b36a1.pdf
Size

103KB
MD5

1c6e57276cac5f9be07ed33a1f4b36a1
SHA1

e1a1ae552b91fd430a176ed09719761c9178faba
SHA256

2760826d4e2a88557dee17d09546997c9134b0c71eb76dbff1bb867c9ce64a01
SHA512

4e33df2a86a024d02a49342760f449dc451fcae188376f7473875ef6514ecdad861937fc146e5a6c478f0bdb457f9984a932d7ed0a14568d59b5755ca0a7741c
SSDEEP

3072:faDu/dKIzWeyFr1ciadvgjNkbwv6VeF8AZv:f3jzWTFXrjNkbS6Vu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2932	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2932	AcroRd32.exe
2932	AcroRd32.exe
2932	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c6e57276cac5f9be07ed33a1f4b36a1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5a974577d9cddeb651f071959e5638fa

SHA1
e95c05022fe29873b2913f6dec9cc7411583c9dc

SHA256
71d0207ffa4dbc6f6275128ebc65e9582efcb5addd4a00d510fafaa4d4c13623

SHA512
5e3e3abd67b4d5d1a2df9f60d6a911ea2529648afb80febd36f9341d4ac5984246e7d2ae705c231348defba19e9101eb86d7921caf654e4e98763bd540550718

Download Submit