afa485893b7dabfbb4a3ea01e713f865b83836a89d27c90674b7deaf47f56048 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 00:20

Sharing

Report Analysis Logs

General

Target

217ac62d7f4b39c1db21f5c5118f0e34.pdf
Size

102KB
MD5

217ac62d7f4b39c1db21f5c5118f0e34
SHA1

c40f26a2d10657a58428ad90edd26cbc8bb96914
SHA256

afa485893b7dabfbb4a3ea01e713f865b83836a89d27c90674b7deaf47f56048
SHA512

cee88f744c036cd62e6c528bff5704989fc94d7135df163951085d368cb5127e626473f727f74840e374f75585dabb0df0db6d7bb46276f2ae3c907af2d3dde9
SSDEEP

3072:YSTm5LqDnMna23t0q9mO3EvuEa8xGPIxWwrzGK:Xi5LAtiOiJEt8PIxP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2480	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2480	AcroRd32.exe
2480	AcroRd32.exe
2480	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\217ac62d7f4b39c1db21f5c5118f0e34.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3304de27c3a02cc79de7b2a9afbc0dd5

SHA1
70ba76a336c722951fe556d2b8b0f98fcc856cba

SHA256
29274bd657012c50e45e2cede5d699a578af23691aa9dd36621d867554c230c3

SHA512
89608997cf47ea06a78f7351aa7c841511374ba5a411dba8d9afd176afe36312145b71fd325f53d0d031cc7471fc3abca3434b1236812e3d1907777689388600

Download Submit