cfffc2101269c7bf34a872930750861cd277df62e17cf9768f22706c6ec09e13 | Triage

Analysis

max time kernel
118s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 04:44

Sharing

Report Analysis Logs

General

Target

28ad702b65f89cf0298a6c8604f69644.pdf
Size

97KB
MD5

28ad702b65f89cf0298a6c8604f69644
SHA1

1f41750d2f35ea216663b7be7f091ba14358e108
SHA256

cfffc2101269c7bf34a872930750861cd277df62e17cf9768f22706c6ec09e13
SHA512

73e01e5df451fed9be1c73265b112f467f75f82ff4d5d66a2da1ca79345a68ed67fef636188619431890ac045671b08f71b294a1c65c57eba3634c570287c063
SSDEEP

3072:0v9bLDFSnO/DcZFwbEuofl7w922Lkc/oqn:a9bLcnOLyl8Lk+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3028	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3028	AcroRd32.exe
3028	AcroRd32.exe
3028	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28ad702b65f89cf0298a6c8604f69644.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f968d50576e2a02b97fc2402d01e56a

SHA1
0047b4e0f829f2d9afd4d4fc437d20bc29fc916a

SHA256
acf1b776f74df5543e4f9d0c187e5d468a223076410b0f32aa030de9543f953f

SHA512
633fa31b1772e1676d309932780cfc7a3a374807c5e657405db8ff34e4fc6a09e3c1dfa581fe04e5d6eb47f7452df4479c758075f19132c6392644fb2c6e03ab

Download Submit