7839286818f6a5033619f1724542d0c1c56390c7b2ddb973f2e8a8ecfdadb596 | Triage

Analysis

max time kernel
117s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 06:48

Sharing

Report Analysis Logs

General

Target

2c328646a984f0d5dead6fccc700776f.pdf
Size

81KB
MD5

2c328646a984f0d5dead6fccc700776f
SHA1

1ee5fe6a4ae0c0809daaba0bf6e3bb242e26861f
SHA256

7839286818f6a5033619f1724542d0c1c56390c7b2ddb973f2e8a8ecfdadb596
SHA512

e13180be6d1fabea9d51f7d7f15f0e1b1b153e3b56b1d1948b900cfcf62f39fb83992b694964b282e77bc5136dfd8d40dd52457140aa22690c0e7bec8eaccdb6
SSDEEP

1536:b75FxhDbMiM9AJrobCNNaYyooWpYu4WQpOCHRD:7zDbbnpobQNaYyoOunCt

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2520	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2520	AcroRd32.exe
2520	AcroRd32.exe
2520	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2c328646a984f0d5dead6fccc700776f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2520

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b863da24e332c22030b4c0c35806ebdb

SHA1
e60481a8ac1ec43344c9fb7620e0be194ccc17a3

SHA256
e10aaf981a1f150e6cc97840d956bd472d63529eeaf93ef33558903cbddb18a9

SHA512
20407cf775de8b74c6a781d635adee2717e9d9ef551a6db687a52d62a5f211bd8c2c671671eb7d96b83b0fec0461ac38e9c63c0acc36db82ff38afb06f829d92

Download Submit