26cc00d357fb2b8249516e08b7f27664ee4b95b0d00dc085328391287d8ade1b | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 02:50

Sharing

Report Analysis Logs

General

Target

252e372259bf41bcabb73b68baa868e7.pdf
Size

34KB
MD5

252e372259bf41bcabb73b68baa868e7
SHA1

dbed0daa645bbc7d09a8a3c39f08f393df5f3b7b
SHA256

26cc00d357fb2b8249516e08b7f27664ee4b95b0d00dc085328391287d8ade1b
SHA512

f0c41147e326c892d484a9f0af53e795fd992c61f43c82cd0630a8f9a632ec1da78ca582b989a764d9514e4df01abc3930a1a5b764523e885cd4425f2cd3d38f
SSDEEP

768:RUoEMMwCiYsnuYlsTPT+fvTVgVsYm/dOAbbUYDPz:Rf9JBCT7+TVUeXbbPz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2248	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe
2248	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\252e372259bf41bcabb73b68baa868e7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
abd9db69d2ffd6f3253402e49028f5ec

SHA1
532bd3f2a9d89e4e59790640de237f8a12ba7153

SHA256
8feefe40408e4074a9e64a81f4b3944b0865903e576b441d089babf4086088e1

SHA512
90aebec6e027faae3a48a070744b088e0e8681e29fc610a54840f912280944137d329b057481635a3cc7cfe133d505ca17c476bf8e8dc10fcf49afee320dada3

Download Submit