42ac6fff4abc5de408218f427f58e26e600412df3dc8d0a0fc991a960a448d34 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 01:35

Sharing

Report Analysis Logs

General

Target

22ff4326b645f831a2c5e7d7525e5a23.pdf
Size

33KB
MD5

22ff4326b645f831a2c5e7d7525e5a23
SHA1

5b6cf50ac5e375e6635f926f7673d0a97d349051
SHA256

42ac6fff4abc5de408218f427f58e26e600412df3dc8d0a0fc991a960a448d34
SHA512

1d3ad93b0af8ce8c0b40445b66080052e1c1e1171452966c77577440ee59196ff9be3bb3a98161d4d593edc62264e5dcda34b8991b4006e37d92eb22d1083bc6
SSDEEP

768:hgGzpDydkIp+XpuNXRFAxlCAz99JNqhEwnXDr3:SGFeUQYyA7J2ECXDr3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
816	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
816	AcroRd32.exe
816	AcroRd32.exe
816	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22ff4326b645f831a2c5e7d7525e5a23.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads