9bc7e1a7f936ce4db4ce79dbbba0eac87072b2eb017c7bd29ba32008371e3332 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 03:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26aa151e44e27ebf8910cb5734a1bf5c.pdf
Size

34KB
MD5

26aa151e44e27ebf8910cb5734a1bf5c
SHA1

b9ba383370b1517a06142212c2a43aa7635ef4c4
SHA256

9bc7e1a7f936ce4db4ce79dbbba0eac87072b2eb017c7bd29ba32008371e3332
SHA512

4d6cf6d448de3bae3069c3fe0792593a884870380916248d3b532a0e634c3808485c671037b9d47880fe1d04a1db041987161c03af74863bfceadb2fa8f8b1f1
SSDEEP

768:ZNdrRhpDSiqsaxpYYGHZ6BodzTuMObREllljXeVa4:Zt3/qfsqodzTnlBua4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1960	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1960	AcroRd32.exe
1960	AcroRd32.exe
1960	AcroRd32.exe
1960	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26aa151e44e27ebf8910cb5734a1bf5c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0395c2fa8de69a9f37ec38577bedb54d

SHA1
ef7c92b13391817a8a99c0110afa1b83837914f2

SHA256
07c910610a33b3d5c77ae0b07694c6315c87bae289991bb5dfe082952208cbb7

SHA512
ee0089e7f3f3865c09d216955fe9b7ac1deff36860c06d1fa66f50eaa5828630102bb2c1cc57d086cee60e812db7dbdf0a5bdb7ae5218b733752d79302b90232

Download Submit