0b2f9577b79274d062f8c66e2b36be19bdc514b4be06d32c595a7db2a58356fc | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 07:15

Sharing

Report Analysis Logs

General

Target

2cff4f4f7510bfb9f65ea495b9f8eabe.pdf
Size

35KB
MD5

2cff4f4f7510bfb9f65ea495b9f8eabe
SHA1

d2d1329e8079302355c875a12b65d3a79f60fc5e
SHA256

0b2f9577b79274d062f8c66e2b36be19bdc514b4be06d32c595a7db2a58356fc
SHA512

a1ffd09b50f45f1a1b3f32d96ab5397695fd94d96566232916f690fe478880347b043ce294b7197ef670fa8366f7001653d7b7db1b07e7446e9a6de96e698c11
SSDEEP

768:hY+4eUsX3pTTCKbFyu7KvKHvnWqUJd9++2cLJa:O+4eBtVyu7kKHvnWqS5LJa

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2408	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2408	AcroRd32.exe
2408	AcroRd32.exe
2408	AcroRd32.exe
2408	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2cff4f4f7510bfb9f65ea495b9f8eabe.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2408

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
edf7c2bda067766bd2a740a5d8be410c

SHA1
8c88da0f085a314bda697bf043a9c376d4192d70

SHA256
2ba3b4165e16558d3ee770b9a11c8146cae6f3da348f6e3c3085b38fc71c3d4f

SHA512
93ca0d3faac69be535712b5cf0136a0771dd5484eaed436b22cd94a66b40f86f542fccfe8bd612d625e26ba966e9efdcd332d391b1a9d4ceb05afc1ca6c283e7

Download Submit