a906a8d252210c53c575e5dc582735ac93004e3b00d545d10393376a45e8e857 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 05:31

Sharing

Report Analysis Logs

General

Target

2a1a53c08d2151923ca73ebd584c47c6.pdf
Size

53KB
MD5

2a1a53c08d2151923ca73ebd584c47c6
SHA1

aab6721921b825c54846e47174bc6b257cf93708
SHA256

a906a8d252210c53c575e5dc582735ac93004e3b00d545d10393376a45e8e857
SHA512

69a6ad665938ea2d456e7f2b405f56e0622aa2c9316187c7e6401664f4b4a79d0759a06948416e49070697723dc9c61c52931b102cde8a3e5c19fa7d37f78fc5
SSDEEP

1536:AlTsk2k/0S1Aw2ZEHLvnKLkUJp6UVxinR:gkk/00Aw2SL+kUJpFw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2172	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2172	AcroRd32.exe
2172	AcroRd32.exe
2172	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a1a53c08d2151923ca73ebd584c47c6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e1b226c8331349d28b3b5e8b7fb2c1cf

SHA1
8f7eb325ab81f22075af52c5675a779fbbeb46f6

SHA256
60f88cca22f7056c0e1b22a8cb719f8e2608c7c059c5c895def990416f03d944

SHA512
f27285578903cc54eb6654475eee7780b70f64409f06b1b3039584786499df22abbdd63076f086b80b63f921727796aa72685ac645d426e8738841e935e6beb8

Download Submit