4f649953d43cc51611a81c3630df8f219f621418cfb2a4a01aae8e58b36b7d14 | Triage

Analysis

max time kernel
103s
max time network
33s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 03:49

Sharing

Report Analysis Logs

General

Target

26ef7a36a6532429dc929fc950c19442.pdf
Size

197KB
MD5

26ef7a36a6532429dc929fc950c19442
SHA1

7a7b7eceac0bfd820c2aa28c68573c98ff074133
SHA256

4f649953d43cc51611a81c3630df8f219f621418cfb2a4a01aae8e58b36b7d14
SHA512

e724c58da9706832d513d9dfac9871db23af2943f5b2753e5a457cf9b62fd36844f48528868271b198f0758d68331201085f320d34928eac38556c750b728731
SSDEEP

6144:y/jsg2ocLQbjQ3zJ7njeyDGz8uuVUey84K9hC+:uYzzJ7n5GQUe7u+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1732	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1732	AcroRd32.exe
1732	AcroRd32.exe
1732	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26ef7a36a6532429dc929fc950c19442.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dbdc142ece844f91450619a9e5282f16

SHA1
7ce25dc7b07a07b4573a82357b143fd2008068eb

SHA256
c59804d7e4c85ebf2c405010aaeadd0c5dce1a431ed4800c9853988df7349c57

SHA512
e185b314a6c7453ff01dddedf931cf36ef709290e49d203b9bb539e123d0cae15f90452d02c405fb58424afe610a8d7baf78925474526b749fc0f1671a2e0bd6

Download Submit