38245a804b5e49a4bae1accd575a0df79258e42d2cb4718f83109a92d7cd1c99 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 05:16

Sharing

Report Analysis Logs

General

Target

29a5601381ff9b7baef04e07acef3093.pdf
Size

35KB
MD5

29a5601381ff9b7baef04e07acef3093
SHA1

984e730457e6e725f4a3946fb3b91bc702e592b3
SHA256

38245a804b5e49a4bae1accd575a0df79258e42d2cb4718f83109a92d7cd1c99
SHA512

bc3ecd3252a1553a88edca8823c872cb849061fbbbd25ce2cba199fddba130ce09965ee18865ad495895a6413f80a83cd138735c498cc79bc2e4498754994ec9
SSDEEP

768:dQ0L/P7urviznZSHGxHxJYC+Nylk5DetS8cyktozi9:pbRpn+N2k5DeX5kWzi9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1396	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1396	AcroRd32.exe
1396	AcroRd32.exe
1396	AcroRd32.exe
1396	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\29a5601381ff9b7baef04e07acef3093.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1c0f080bc242080626ad682d8426084d

SHA1
64d1b88982802eba8d5e85ab2ba7390391b4316a

SHA256
5bf55d4dbedf8ed85ff2b98fdf30447e522d576aab13909a7f2825f4a8e5c6cf

SHA512
63c44e6fccb47d7d6f97db65fe11b85a55074696a637b3c5253389cee38e58d13a39114d8bfe7ac59aa03b7dd72c4ef82b13676f73811c6d6e5e417b08ebc746

Download Submit