9be15abc4a9106f8cbdd1dfac7da4e9e8cdd32f7fa0c36a7f09d8256d933892e | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 03:03

Sharing

Report Analysis Logs

General

Target

259aa76259f61c490719b1a266604a0f.pdf
Size

31KB
MD5

259aa76259f61c490719b1a266604a0f
SHA1

77caf1331b19a57b67f09cb66361141912f67910
SHA256

9be15abc4a9106f8cbdd1dfac7da4e9e8cdd32f7fa0c36a7f09d8256d933892e
SHA512

d239dd5eb627f96002fc207e141f44a81b9092535c7bb5699df84910ee4f9e89a91c2ebe9c106bcc9ddf39ddd28a47e7741443505db5ea22526bbfbd92f75cc1
SSDEEP

768:QtHulUu/EDC2Rmgfwl/ZjaMRzgD64aOeR:QtHODEDCumgol/ZjZmaOeR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2364	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\259aa76259f61c490719b1a266604a0f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c837e63c7c28b83d2ee5ecbb78fd2a16

SHA1
f0c1d4636d1aec9f4b0ecf716dd99a6708b9c8a1

SHA256
1982bce3e5dff9fafb40a92d2169615e1fac480a53f9aed3309b3b208e7a52a5

SHA512
defbfbc027c359dbcc98eef5b5690f32ebe6fc8d716be8a3d5597264e85bac89f8f5247f05285e50a0634d5dff42e645e4a508dbe9c88072379ae50a711c5357

Download Submit