f967f521ab6806ba5841519d328aa98bad98fb673482d09b46b6b4762c1ec457 | Triage

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 12:58

Sharing

Report Analysis Logs

General

Target

37059b5372d5a7826ad6c6092b25a228.pdf
Size

122KB
MD5

37059b5372d5a7826ad6c6092b25a228
SHA1

db95ed8d9450c8ea9f856dafc0d22b7e61d2e6bb
SHA256

f967f521ab6806ba5841519d328aa98bad98fb673482d09b46b6b4762c1ec457
SHA512

da83274fcb4a3f77c837d0227740872bb7bd1a72df82365f00d404c74dbcb8db5866037848b91b12fc7ba96a2fd7744ca7b08e7e334ab074901d83c158056840
SSDEEP

3072:CZ5ZAImsZBTm6W/b7CJu9xAITPAyLlLRL0eRx:uvAIBqbiJu9xbAyLtH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2908	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37059b5372d5a7826ad6c6092b25a228.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e4014de3b6e88d2f4958ff7282079b59

SHA1
66e3a9ec056da44089000e9c617cc89f3c4de719

SHA256
ec0b5e1972c49277e53166d77d3144b2586bb02708329446f2a3ebe435e2e6c0

SHA512
9958b49363c775b8ae992f94e799546516e443e47ff70216327d96e898d98cb2de844247b115df45747b80b8c0a8a55053eee10e2ecd5043c724cf53ec80b36e

Download Submit