282d0de8d901ebc60363e2ab2294406383266989985e2055d758a2e34f90f9f5 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 04:54

Sharing

Report Analysis Logs

General

Target

28fa60e25befcfb7ed3648873651ed94.pdf
Size

34KB
MD5

28fa60e25befcfb7ed3648873651ed94
SHA1

c95c7e6ce94d410c11c0a50cd9899c546ea2e3d9
SHA256

282d0de8d901ebc60363e2ab2294406383266989985e2055d758a2e34f90f9f5
SHA512

c35432554d1230721f1b026675ccfb97d64251e54e202398322632ad449ff56eedf9f5f305d1bf03400e487e4a7ddf801f5e1f76b993cbc659cb994f80341ff5
SSDEEP

768:IgACKuksWzekntM96vywFvumNTzL+4JAEHlFgS:INddM96v9FvumNHa4JAugS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1204	AcroRd32.exe
1204	AcroRd32.exe
1204	AcroRd32.exe
1204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\28fa60e25befcfb7ed3648873651ed94.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
096b18d90eb9c37783dbf311b614b085

SHA1
ef5cb39c3579dc9d148d979340b9950f1d35001e

SHA256
842a577147755e14bd401db38e9bd059763e32f7353f5ce3e9293d5ca63eef8a

SHA512
254f2958d9155b895cce26c733cd76078925df950fecdb35de60ce76fd6cf46eb86f31e17cef864cd62de40db15d6326fb43efe5fe0fad7b2eaf46ca916cd2d9

Download Submit