4e102fc530bba436e1c57b02feb7c95d1afacbf85c7e959a317e54985d446c5a | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 04:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

28e2a22ed3e32d0e60f14684f1486bd4.pdf
Size

35KB
MD5

28e2a22ed3e32d0e60f14684f1486bd4
SHA1

631daa427caa11fdbdacbfa53cfc0647d11d891f
SHA256

4e102fc530bba436e1c57b02feb7c95d1afacbf85c7e959a317e54985d446c5a
SHA512

a0d71a5680cfeb32af70397892e404efa0496d66a9e9c11fb12b7602d6ca1a8fe638f6c573ba614793cce9fdfd3a2e98959e24125cfaa5a4f8425d85a709698f
SSDEEP

768:2+WBqr7vPuq4kN7RxmfuQeyRD1ud90I/Nqz+Y60U25:2dqdlzYWQv8dycNqUv25

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2192	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2192	AcroRd32.exe
2192	AcroRd32.exe
2192	AcroRd32.exe
2192	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28e2a22ed3e32d0e60f14684f1486bd4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f03054487998461cabdd4dcc7ce169b9

SHA1
25cae812d282348d97cad676f7b2cf52e1d29557

SHA256
caf47000c9f3e0960626929775b083fcbb195e348b285d73f3e4be644062df00

SHA512
05d2d755cb874ead24b53239efbb196e3c614e11c16e51d08f4fb1070fd0ce9f7f0fe57a7003c195e8e99ed1a846d3568afed26d9c05539f05cac0ea3135cfba

Download Submit