f6f5516f8d9299c496874270e93b355df1b6bb1b15e58021f879ab0f7c462787 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 04:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2792159e6d06e294fa9e2dac8de19698.pdf
Size

118KB
MD5

2792159e6d06e294fa9e2dac8de19698
SHA1

15fbf0aeca89ac621566b74f00d4ef4c34d36465
SHA256

f6f5516f8d9299c496874270e93b355df1b6bb1b15e58021f879ab0f7c462787
SHA512

0706a4907eaec7f24c2bdc92c4b5d3a1723cc3b42ebe3aebbe853c556fdaacb4813a1be1be3d6a18d7e7e8c13df964380f372ea458e6d1c3c0cbe8a53d6dc88c
SSDEEP

3072:yxAMU6Olg8NdkPYMuQilZi2f1C7mtqqE2b+:6QxWOd9RXfLK2q

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2968	AcroRd32.exe
2968	AcroRd32.exe
2968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2792159e6d06e294fa9e2dac8de19698.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e483155087db37230136288fda9bc676

SHA1
3035eaf326e5760ac128604da8f589b0a6bc7738

SHA256
ebc0c57b05ed9f17594c544cdabb94f781e35634a2906f8509c492b2a4c55b9e

SHA512
675ca7951dd11b7a015c7d5ff7d944e5302b0a21e9c62374471de23bcc009f05705ff0cb1448498604a0d82bdc5819f9771922686f54599ac2c36bfdb7dba5a5

Download Submit