98e276db7d3f90d047f2894f8cc8eebc2c837a88abacd810080a33aa66280c99 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 05:26

Sharing

Report Analysis Logs

General

Target

29f746d7d7d9501ebe6907408b6500f7.pdf
Size

103KB
MD5

29f746d7d7d9501ebe6907408b6500f7
SHA1

0646f2ec5d0721ecf602ada0cb0cf0932ff432eb
SHA256

98e276db7d3f90d047f2894f8cc8eebc2c837a88abacd810080a33aa66280c99
SHA512

9dc479a3546c47888a0fe1f76e2d5e96793479601e64d4787025ad0ac28053e7778d79229d194624de27bff19c7e75c500508fd9ce47ff954d987be889925631
SSDEEP

3072:Yb6UynoWSSHGnhAL2og47fAwrjsdPbnGI:SVWSSHo/ogEPsx9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2304	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2304	AcroRd32.exe
2304	AcroRd32.exe
2304	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29f746d7d7d9501ebe6907408b6500f7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
97fdc7cb01a0c368409e60515f401906

SHA1
60e2762146b0d149a1bc7715c34bcb97cd130251

SHA256
6491d413c89a58affb83d674887f8ffd6acbb099d3c13402a2cd73f62f972591

SHA512
e73ccf35602e575166b9a0351db4128c20c07f0480b57c85c77c5b482a6e50ed08164d6c591062b790ae39a2aa445c34800ea3e46223d754315b0b1bd98497fd

Download Submit