15f000d25222498f8c05f03721051f9dfa7485fb60ebc8eb8e7c8e24b0beb4be | Triage

Analysis

max time kernel
179s
max time network
33s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 02:38

Sharing

Report Analysis Logs

General

Target

24c945d5434eb24dca75237b857bfdfa.pdf
Size

250KB
MD5

24c945d5434eb24dca75237b857bfdfa
SHA1

3c04a05c24fa0c7fa4b31e3f29eef9bccb9a6240
SHA256

15f000d25222498f8c05f03721051f9dfa7485fb60ebc8eb8e7c8e24b0beb4be
SHA512

d5cc693f21471afbc2f42b225fc9ca77ba2f358f3178196f19a84a0a2736b049d8ac3f9b4a25d6d698a2ac9ca7a43f7c97343e3932d66d23c1b94c775f5e299b
SSDEEP

6144:jbWvznEXIS3WTo557zYFODgGZGdC8/IJwZ/i:jOzKISHnTBQ0wZi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2932	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2932	AcroRd32.exe
2932	AcroRd32.exe
2932	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\24c945d5434eb24dca75237b857bfdfa.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
41362be3db785f0c8def3fa003fd6f75

SHA1
c2852bfe1bba3c88dae2dec7e54a65b26b62473f

SHA256
8d0c19be3d245906deca888f9413ef6f8f1445233d1a3fcb90961b6f112cff66

SHA512
b4188c4bcde8a67e1d143ecb6943e5ecc39c206e2130bb3f49ad021380b576c9c1978d66c07b99d4be2b2b7031eb70dfc8db49572bc09d3a38116c306ce53477

Download Submit