fbcf0aba5dee1d7ff518d98fc062da83d156daf90bfd1d871b73366ac2fa49a0 | Triage

Analysis

max time kernel
264s
max time network
319s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 00:01

Sharing

Report Analysis Logs

General

Target

20ec09f5a1720feb7e39cf8c2e717141.pdf
Size

49KB
MD5

20ec09f5a1720feb7e39cf8c2e717141
SHA1

daa66e70e148bc5fd0bbae7eeb29113a18343d05
SHA256

fbcf0aba5dee1d7ff518d98fc062da83d156daf90bfd1d871b73366ac2fa49a0
SHA512

6bef676971654c2c159859be9866d9f0e6ea1a22709346c620a56f52cf542daa37fa533dc99516f8f6c429a34927ad9123f3d69e4a59ae70c90a1f8859176c89
SSDEEP

1536:u+vcBReml6FzO82/xPRPM6ImxdH0ZhITGnm2c8:Tc/llEOH7cmxdH0Z77J

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2460	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2460	AcroRd32.exe
2460	AcroRd32.exe
2460	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20ec09f5a1720feb7e39cf8c2e717141.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f0e3f9fc545f681d2e84399f774cc5b3

SHA1
041f33767e31a3f5e97debb32b6d7adec763a844

SHA256
0b7aad34224a74201ae65ac2a026dc1126cd14c99d3a513659df4e9acd7b5e54

SHA512
8632e839f37d64a787ebaafba81b6d95a11162757ca4fd693ccc0b61387cada22673c811421dbec0dfc52e6d2c0b90a3004df4029e733ee5a91ae66c99b1ae0f

Download Submit