9d3310b2b1d65f34c1b0ffb655345826f62fd5cec0455b8d357b50238cce4a3f | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 01:01

Sharing

Report Analysis Logs

General

Target

227747411e4c35af276dd049a06f1d04.pdf
Size

152KB
MD5

227747411e4c35af276dd049a06f1d04
SHA1

355e65b7849716e4f2fa317366a35882fd609323
SHA256

9d3310b2b1d65f34c1b0ffb655345826f62fd5cec0455b8d357b50238cce4a3f
SHA512

0a932c6d130d0618afc81e095b0b4a8e4369996aae3d5bbfe339c91da294005d10a951e251aa82f572b3a881813b59a2b60c5fa92e832124b85caccb8a7cd24d
SSDEEP

3072:mM+pCpQQdTMxeR3BgyWzIS3Ic7ZMQx8adZp7qeFnF:j+vQGg3BDWzIYXxfrR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2224	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\227747411e4c35af276dd049a06f1d04.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ebf5cf095a24d35524a963b3049a2a41

SHA1
ef1a87b0bec0a9531ea5be22c6b594917676ce3d

SHA256
ed72b11b5e6550099d4a324e490f8d5da1eae191c3409adde3368d5b37b67e6e

SHA512
3af0ce3ecde60c3e35e01f001459c99b082287df621d043d8dc92b6f563b39de9dbf732fa5f905ffa6a6b8e43a3b76e62b2eb88d8c98a252a2b30f03423ec2cc

Download Submit