f12f5796a8d8ebd8a5226934452178d61672452f470c40854571e22800988324 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 01:03

Sharing

Report Analysis Logs

General

Target

2281d51a0f962e1b6c218b87b690cbc4.pdf
Size

99KB
MD5

2281d51a0f962e1b6c218b87b690cbc4
SHA1

14e6b8920e0bf8276a53a7fa5aa56cbb691dff0b
SHA256

f12f5796a8d8ebd8a5226934452178d61672452f470c40854571e22800988324
SHA512

961bb98228c58651f8fa3808c9f56cc20a94cb236d56c3ec3adae92785f4f1c750c779072eee17bae7bd203a1dcc9d9901c1558fa55fd6a2b8b58a5ceef73a63
SSDEEP

3072:VZQl5EKYA07ZPbabzhEH7vU6b8YXM/xolLa8jEV6QE:FtVPbabzWbvUKp8pVe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2132	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2132	AcroRd32.exe
2132	AcroRd32.exe
2132	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2281d51a0f962e1b6c218b87b690cbc4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
19a76c67cb45ec9c445b63b1b2e864df

SHA1
a8a8187a22c3f707fbe2ac3bf030a96e643e4686

SHA256
a03cb1ca8e7cbe7e67d6dc8a9e7f029296f03b704685f176a07d5f4777c5ef36

SHA512
33bdccd131b8f7333b9359fac1e681b4c92ef0ba13f534a833380c2482c8686236f15113d51883ef77408564861082ea8fef7bbf341a0b6445655e6ab81e2017

Download Submit