55185d7503b257a6c29a339e16faf34d386709560e318c6e69b7688e47c181be | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 06:22

Sharing

Report Analysis Logs

General

Target

2b92a4102e465ea47aefb6d211dd4754.pdf
Size

35KB
MD5

2b92a4102e465ea47aefb6d211dd4754
SHA1

a8619dcb39dafacdd76a5128a22af503102a18de
SHA256

55185d7503b257a6c29a339e16faf34d386709560e318c6e69b7688e47c181be
SHA512

9570c4f1e2d0584f3c2c35e07ddd061d3f46751264537f45739cc7d95582dd7837cebe7f79b1fd531922d18434ebe68c30cdfcdad38083ea0e5e677664a11318
SSDEEP

768:bOkZ8dYK3c6EsqMJAF0Uy67MMqjHA1An2X5lTBoh:jZ8R3ZdJ+YM182XzTBoh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2720	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2720	AcroRd32.exe
2720	AcroRd32.exe
2720	AcroRd32.exe
2720	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2b92a4102e465ea47aefb6d211dd4754.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1719c8695f40a1a4fcefe8597a6aaabe

SHA1
572cc19b29a1612cad47b86fe08c0a49222dc7e0

SHA256
1dcde05a07d6182828261f16f159009db09a080dbb14321a81f36a2f19cafb5b

SHA512
905b5b029d3f72279124a89d0ec436aeee70f5a3fa259dc559973b04e1b1fff9b35812c7f4b8e177aa89e7f4b9caedb550838899f8091b1a982db4d85a74fe89

Download Submit