8eb3c68f1b9ce8cfc0379f65e86db493c91210e85cfd8f63b85b98cffbe95b6b | Triage

Analysis

max time kernel
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 00:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

22600919685166120be4fd449c9415df.pdf
Size

34KB
MD5

22600919685166120be4fd449c9415df
SHA1

d1510c9710b595bafb7a6599e473947571e479ca
SHA256

8eb3c68f1b9ce8cfc0379f65e86db493c91210e85cfd8f63b85b98cffbe95b6b
SHA512

13c4688e925a113d202989c5702071e68cc65356575226b3bbadaf68315fb57c40c90fd1ce4296861e4fe6dae8d677b22f04e979c03c689d3fae38dbd13c34d1
SSDEEP

768:/OJOkCFMR6rgsKi8HvI/uI+Ab+9FaIRRx+bMeNjK:msk2uHvMM0IRqLNjK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1752	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1752	AcroRd32.exe
1752	AcroRd32.exe
1752	AcroRd32.exe
1752	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22600919685166120be4fd449c9415df.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
20b82d806ae16f0245b970fdc7afeb9a

SHA1
1feeb5bd5582829c8af9ceb05f4f74a2a9817eb6

SHA256
3f357c4cabb2146fd5fff50c942a7d8e7718a32a7f44ae33f863e4b0e8f4eab7

SHA512
a50e08866ecb0ffe19cd8e84bdf3735ff9ee4e0c257abb33e0f0cfbcd3c09a768a5096a43a5a93e49d6643876a7f107ea9256d9b2d53efa32c1e4cd0df1f2f45

Download Submit