432fdbf37765299535d1d493f425d38c010278ceb63a35d9ea35513dff92c00d | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 04:42

Sharing

Report Analysis Logs

General

Target

28a380f279d7e73a8449eadcd781627f.pdf
Size

69KB
MD5

28a380f279d7e73a8449eadcd781627f
SHA1

664078a0f9d4f592634736a9f667702a89d66756
SHA256

432fdbf37765299535d1d493f425d38c010278ceb63a35d9ea35513dff92c00d
SHA512

877bf5c614b3a5ee868720634dcf9d0c3bbad6d840eb466873e6f76715df5174b9fc81a618f77c2d86ce089578ee9d89f4f2723aa5a895dadd3cdb24477ebd7c
SSDEEP

1536:b9WRzCNP4Va6lzxzBiZ+cVjxNa63fvYIy:+eO7ldzBiZ+cV9ND3X9y

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28a380f279d7e73a8449eadcd781627f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5a5108d732008d793a6061afd19d7e1d

SHA1
83d1a61b295667fdb2ed497d6bb487a55005c0cb

SHA256
a524488d57b71eb32b9f0e860a3fa62c089abc350d8cfbc0f9c3437a4580f8be

SHA512
ea5af995e277711bfc2eb14612d9f9d95e8f375536299e2babefeb2cf8769fffd4e05c9f46a9d486b5738fb4fbd707d8bcd06f12e09c4daff47e6c2f9f0a3484

Download Submit