b5edf019d99b5162b704a034537b4f014812217c50e82c8a25acaafd31e71212 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 12:48

Sharing

Report Analysis Logs

General

Target

36b008f6e9a413c4601fc1bfadda56c0.pdf
Size

33KB
MD5

36b008f6e9a413c4601fc1bfadda56c0
SHA1

99e8c6059ee3117eceddde54236198754f9d4880
SHA256

b5edf019d99b5162b704a034537b4f014812217c50e82c8a25acaafd31e71212
SHA512

a664eedfaba2d2ff6b791dea6e3c8ecd6b90766415ae28f614b9696d16641d151ed956a3107b33c9e7d47bbcf69dbaf0cbed24122d8138c1d3b4ff399f342db4
SSDEEP

768:Wi21iYssGjb6WsWxMLCQ8GQaVw2wWWm+tuh/TGQ:Wi2MNjb6VWaLw2rWm+ITGQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2180	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36b008f6e9a413c4601fc1bfadda56c0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
eea902b9ea8c6b4be68861199caee0c0

SHA1
dcf72ba485adec9408eaa3da9ef6828b3d431171

SHA256
b12b6444a7921099da9252743d02e38dcfe8da1405d9dc3c8efc29d4d0739cb8

SHA512
5ce625e1ba421b364e9e7da94371a7a9a334df7b7f2a8429d9f9b99cb614d4454a0350af9d6f8551e528424cb6a2b6c602a3931bc01f30c627b30d01968fbf67

Download Submit