5975e1000e969dd9567b909ee75c2bc3ee770556046a98c7480c4aba0cbb24de | Triage

Analysis

max time kernel
122s
max time network
132s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:31

Sharing

Report Analysis Logs

General

Target

2bc7109c6643cf4eea0afcd746034d3f.pdf
Size

100KB
MD5

2bc7109c6643cf4eea0afcd746034d3f
SHA1

237d313825ab26c94742cc33cf49f99403a36014
SHA256

5975e1000e969dd9567b909ee75c2bc3ee770556046a98c7480c4aba0cbb24de
SHA512

96c6471c0129a3428d83fc9111ba6d8b49f5a0b4076825c932936bdef73f15a98a40242a9cf78a0d4623cd2c71a72d7bbf60af3975bfd795a3197e5414d95bed
SSDEEP

3072:BPF4WWgbhOh8ovEzsZ4qmgEOVq/wr43nqpzO+l:VFvj4Z0fna

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1796	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1796	AcroRd32.exe
1796	AcroRd32.exe
1796	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2bc7109c6643cf4eea0afcd746034d3f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2188991c8926b0927441af9ed027acfa

SHA1
78197520d444d4f579bc91b893d7fb9252dbe2b1

SHA256
629a7c3e90a98d3a3cf27f7c2bbafee722d86a51fb8a94d8a9a8769f727d3938

SHA512
4be9af612bc1a5c0c1871f057fb3a5da073ad8beac0889bfdd8a9e8d949169f9d9b69b4fdd0d5bd53ccc8962644cdfd47d1a028fea244b228304862b0f1a5a61

Download Submit