5735b6d107dd734f8a01cdd5e0f39a2029d5028b471ea2dee4441d15787ff066 | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 01:20

Sharing

Report Analysis Logs

General

Target

22c25e19c383cb263ed1ad82f7f143ba.pdf
Size

125KB
MD5

22c25e19c383cb263ed1ad82f7f143ba
SHA1

eb26dce6bcf741a7926e2f4f48a6521c314387e7
SHA256

5735b6d107dd734f8a01cdd5e0f39a2029d5028b471ea2dee4441d15787ff066
SHA512

6213c9a5e8170c2c3e0a370f25d91150b53aa2b827cf23732d0617cf0d7bcf989b1bba69ce1a3f3324babb3ff7320a9db7138d3a66148ef86ebae83ab9f86b48
SSDEEP

3072:4Av1m/Zc6Oci0pUA/MSTJVPzZf+0qqk0fJSCw3:p1mhhpi067QJ56qkYE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2572	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2572	AcroRd32.exe
2572	AcroRd32.exe
2572	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22c25e19c383cb263ed1ad82f7f143ba.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5e0121fddfe10e01f189e72c313e38df

SHA1
2633838e77da5f20bd63232d00ba90f9159426d4

SHA256
2e0112ff136079184798a46d9bdff135c046dd4da7c7ec0ff2526437a7e64c9f

SHA512
76ac7cf54c07453b075b052f67bd567c311a5404c4b179a020e6bf31da4f27e769a30b9642e3a9e6d92d47f159e999f0181e6a8532aae0b8ac8cfb1983d7813b

Download Submit