d4ea44c96f31369d3c809800e9f4f1a9c1c1720dd068c39d382677585361c72f | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 00:05

Sharing

Report Analysis Logs

General

Target

210c94cbf939119f8c3bdc2c70b82e44.pdf
Size

105KB
MD5

210c94cbf939119f8c3bdc2c70b82e44
SHA1

5fcc27ae7b447b9493bf01f3c1ec60b077777532
SHA256

d4ea44c96f31369d3c809800e9f4f1a9c1c1720dd068c39d382677585361c72f
SHA512

d69bf91d1e2fa03a7a12e6798c66b4edb538881927383d1166231aac010b6c8e60400c340704107aaa5821c1859f5c35830e621898e16b2384c6b9959155cb7d
SSDEEP

3072:ulgMcJ3gBfnHXk/wVU1vsX+njU9itQeXo8:SGWmwCvsXEjUot

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2816	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2816	AcroRd32.exe
2816	AcroRd32.exe
2816	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\210c94cbf939119f8c3bdc2c70b82e44.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d2a5d80e609861185f0e2dc3ab053888

SHA1
8d7a71be89d31e1dfc2009ad0abbe13aa09a2ee6

SHA256
fed513e42054e798d923237c828464cefc6558721d799c47a7668bce6c9a9a15

SHA512
d8bbb4d79f72a629a3a0c65062c50a63f266346272f714cb5ede8d0f08ae68c9db0b373b385238ccd72213187857b3e2b00947896a7fee7730eb55a2e947113c

Download Submit