a52da80e0504ea69387556107f411e9b5a0354ac43c344b83eb0f065872b92f0 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 02:15

Sharing

Report Analysis Logs

General

Target

242a2c4d510bb900e92c952d4dfce575.pdf
Size

36KB
MD5

242a2c4d510bb900e92c952d4dfce575
SHA1

d7899b8a0473a6a5ec0af1593076a1c9f0fadd0a
SHA256

a52da80e0504ea69387556107f411e9b5a0354ac43c344b83eb0f065872b92f0
SHA512

ed245c44e3704170b7177ecb028c63d7151243e10ef847c8afef5bd7befcc5952c5a3b962664bc670d8f948bc05ab9adb3672df72ebfdd5b004708ed5946fec3
SSDEEP

768:KIElkuYfC0+wsDGtCY/rA/xcjgBEr1u5CdOgVi:KHaCusw/r6cjgBA409k

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
756	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
756	AcroRd32.exe
756	AcroRd32.exe
756	AcroRd32.exe
756	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\242a2c4d510bb900e92c952d4dfce575.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b9945bc94e0fbb48fc1f3cd7af94e53c

SHA1
a3247c5b0ef8ea21f31f48e9fc943df70c9bb9f4

SHA256
69d3ed0f8f4c58a1f1b4c4935a033f148a9febd05ffee949037a0eaca51eafff

SHA512
2909321698270bd4aa96643dbc41f7868fd2add3e135f3b1301e9292dbed62cdfd34eab3cf00cbd8f205d2636d350526a2d7b3dc03a96a767c640d630cf208cc

Download Submit