8ca5a1ecad2b1cc8d09120c539d4855a41106fe88aea0279a730f68d87bb8a9f | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 00:14

Sharing

Report Analysis Logs

General

Target

214ba72cd588ded6073a76f97102a1da.pdf
Size

99KB
MD5

214ba72cd588ded6073a76f97102a1da
SHA1

c66ab07ee2c75b58f1b0802e7273d005f4f37449
SHA256

8ca5a1ecad2b1cc8d09120c539d4855a41106fe88aea0279a730f68d87bb8a9f
SHA512

3b58110c2aaff8809f5e74f744661185a78b8f2a08c68d080f8172378a3fd90b522bcf771fa8af3380442e397f29a6a4efe43233b3377fa73effbd862ea3ec11
SSDEEP

3072:MqDNhKkrA7DEmwnaUkRzX8Sy6qe7raom7:MqXbE/enzgX1yue

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2368	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2368	AcroRd32.exe
2368	AcroRd32.exe
2368	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\214ba72cd588ded6073a76f97102a1da.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f48d52725776d794c73d851ccf29039e

SHA1
6ba5148751fc89835ce550c0cb07297781cd38ce

SHA256
9cb0398a929fc2fb0b4090578387b4bc2b9defe67aba481a6c9256cdb39df62f

SHA512
81fcc10ee1975a671deb784311b449b8020d752333b7d9806edf269bf5d4bd858f563ee4fbf9ed979d4c603f87657e813fd367fcc7e37c15d5c89baf67d17df4

Download Submit