901e758c341beef546259210e39c8b5b6da6fc0e23fb275247c34f4c01945486 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 00:06

Sharing

Report Analysis Logs

General

Target

210d2be4d8af145b432efd86b18e0726.pdf
Size

68KB
MD5

210d2be4d8af145b432efd86b18e0726
SHA1

98fb7e5b37d5b7c20551b3d1f2a6ea7821f3bb92
SHA256

901e758c341beef546259210e39c8b5b6da6fc0e23fb275247c34f4c01945486
SHA512

4c17b10071e00a960dac6bc4132aa0d6b516ef5e2ddcb9031901c15bc9c40400034253c3bd6f7c91820cf4011bc2ddf95c846d62219b70d998cf2b3d79932211
SSDEEP

1536:n5no2SI10kWTazx0vpkjSplPEyGdcanMRniv:5njSvkd2KukyGKaMo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2508	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2508	AcroRd32.exe
2508	AcroRd32.exe
2508	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\210d2be4d8af145b432efd86b18e0726.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f72eafae8fc6381dca58e0168da0b74

SHA1
641839f8e872019468d62e964b390976afee6267

SHA256
f31c293e7d8c7ec2e7b2f75f2530e169c61dca600fb948862b7b8a1de3f04165

SHA512
4cddd76a57911b56fce35f5cdc3bc3136a590a84d3a5a4b586dcc818f7fe90bebcbd753dc64ffb192a53ba2356e767993e39298b75bb1bad1256e27ed0b6d717

Download Submit