7fd9efdda5cd6271ca76c4836de9cc442d8fe0a4f90cb55197ced914d0c1a286 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 12:45

Sharing

Report Analysis Logs

General

Target

369fd4f972b89d0accbb173f300e4d40.pdf
Size

62KB
MD5

369fd4f972b89d0accbb173f300e4d40
SHA1

45955b7d2815c6b3444c0cdccfbe4ce70ee6b5c5
SHA256

7fd9efdda5cd6271ca76c4836de9cc442d8fe0a4f90cb55197ced914d0c1a286
SHA512

100efe845feb3ff718f977cbe8174da4ea44354b048e07823960dc447df0fdc4885776b41c99fe59ef3061d4d2bc77baf40442e7880357dc1fd3787b1ff29352
SSDEEP

1536:GDPwg6x97b/NPM0UAWCJSJKzIr6n/ypSCo6uG:UPMprO0UAWCJkKz8ao4JG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2512	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2512	AcroRd32.exe
2512	AcroRd32.exe
2512	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\369fd4f972b89d0accbb173f300e4d40.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a37b049f0ceb74bdf560e6e8b896711e

SHA1
3cea37e628235d7758740e7f5529f8a1b170e496

SHA256
86d1b06f24cffaeb981cefa67ca425140b4531aab5e5d2d85fdbf68872a8f181

SHA512
2153a225672d2b80812e6fcdbda54a80c808c3d2410226f03fccff264a3a0ab8ca0205cdc305ac4fbc39bdb860a9a4989c2c05685f6a55a8f72e7a625b12f086

Download Submit