630cb14de50b662bab2d586d14048d05de9cdcea92a3b3ee2a60c389d0cb4306 | Triage

Analysis

max time kernel
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 03:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

25916f45b304e70f672226131147b4c1.pdf
Size

76KB
MD5

25916f45b304e70f672226131147b4c1
SHA1

ac9abe75e185faac26b553bef4d11bf62b1f4ec5
SHA256

630cb14de50b662bab2d586d14048d05de9cdcea92a3b3ee2a60c389d0cb4306
SHA512

d4bfa012c03da6dd652ae48ab08c503fba02a5b5b45096c91dd764927b14ca94c3c59fe5a7595a7e52220a9d36237a9940981deb1c95c0029dbdd8238b01d68a
SSDEEP

1536:SdEavywb6HP2LZCylb+96LR/WpHgjAopRnmUlVe9otIfRF:za+qbxLN8opRml93

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2912	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25916f45b304e70f672226131147b4c1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads