5f87cf6ecb067b6f0eeb64c8eb5286db24d18be382b199d69c36a51a8daaa3bf | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:35

Sharing

Report Analysis Logs

General

Target

2be226204c6fdd376ac3282777ec470c.pdf
Size

99KB
MD5

2be226204c6fdd376ac3282777ec470c
SHA1

467b6b890b7979ec3b8de1fbb634857a72ce3e31
SHA256

5f87cf6ecb067b6f0eeb64c8eb5286db24d18be382b199d69c36a51a8daaa3bf
SHA512

982defd6198fc673c3115250309fd20b92da28d2c01f7a5f89ea2eeaed7bf05f24543a145cc9162dee28c4ea50def42c5eb51e1b2bd9c2be428c588ac2959414
SSDEEP

3072:uMAm3PqMRDrZ78Csjpe/7ePLtEPZjsemYmABb:fx/NB6pjpEyh+5mU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2360	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2360	AcroRd32.exe
2360	AcroRd32.exe
2360	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2be226204c6fdd376ac3282777ec470c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
77b7cf0047249fc24daa63e00c930ae2

SHA1
ed9e81bfa3bfc516689dfb28f454dece3db61e87

SHA256
46bce848857e1bfb7228bba52ba343aec3140f42875ea97e14cd505f69271192

SHA512
feca0060dee596a99f8217eb66f6296526158b6602f6d7f8136ca8bdfbb5e6422386bb113106e2ea9f5393b3b15c7a65468d94d0d45ccc9823083ec7a8fff460

Download Submit