1126c5a712899ab7fb886c7b38b7e546b164b49096229db6eceeaa4835ddfddb | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 05:08

Sharing

Report Analysis Logs

General

Target

2963e81dd28e39d1689227eac689d8cf.pdf
Size

56KB
MD5

2963e81dd28e39d1689227eac689d8cf
SHA1

a458420fdacbc8992c2a8a23c876f91966419be1
SHA256

1126c5a712899ab7fb886c7b38b7e546b164b49096229db6eceeaa4835ddfddb
SHA512

b94ed7a944370bbf02853b5be0ae6b65f047d8fe6fa8ebd314f520fe8e1a0d36249e99c48d24e7d820b6eb42cb0a725717fc460b4051a00ec1f016b41a6dbcba
SSDEEP

1536:eGFGfd2M0xPgomPS+jAVp8LO1iD0HosQWS2k:HFGFAg3PTOp8LUosa5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2360	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2360	AcroRd32.exe
2360	AcroRd32.exe
2360	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2963e81dd28e39d1689227eac689d8cf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3d7f924c3250102acbbbff891e99beb4

SHA1
afaac30b95264f46a3d4121310041eb26e1e9647

SHA256
e21bc658da772d1c14ddd1088a23cb27739033707eb97df525c6cbff98f0de28

SHA512
cbd5befc04b2009dde0a9491a635c76e4274c471e4126a32ada807e74cb9d83f4a5a7aaad407ad8cff662196d7c693f0d9c9e9b17cfe33b81548a0b96210ca70

Download Submit