e7929341a1f0a68c905ec751163da7fba7e96ba421ea42e86da8765236bd75c7 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 06:04

Sharing

Report Analysis Logs

General

Target

2b182ebb9e45f35100d6de1017151381.pdf
Size

34KB
MD5

2b182ebb9e45f35100d6de1017151381
SHA1

7ba2c6c68a5de88e47f4fd0cc2d6693068105941
SHA256

e7929341a1f0a68c905ec751163da7fba7e96ba421ea42e86da8765236bd75c7
SHA512

d0c4c2607b2f9c314642498a94eeb5203573320528118cfcfd72a2e02acccd16f8b1e23c79474b01eeae2394e4cc5b12f2a76a509b5ee39a108b1c785d1b71db
SSDEEP

768:kpLpYKTBJSJlWOV+aTwB5jh8kwfjFIQcK22Dxe:o3JGeii56nfjF93Dxe

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2940	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2940	AcroRd32.exe
2940	AcroRd32.exe
2940	AcroRd32.exe
2940	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2b182ebb9e45f35100d6de1017151381.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
292fb41812909cf85f1769dc9b6ae2e5

SHA1
ff8616c73797c21b7dfff226871fd01e345450fd

SHA256
0d2eb529871663d3e30a7ab369ed1e722f75202152d96faf5cf7a6efcee364af

SHA512
a18a9a0199efaf09fa4e0f5fc4123ce6310546a2fc12a4d16c4f99232ef59579b87fb278914500da21318a010d4af2e8d5f8b0e439f4701cdd3ec52407e331fc

Download Submit