74bc9c94a949f3f59b6db76d223537253a96cd3f4d05d916bbc10208156f8a20 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:56

Sharing

Report Analysis Logs

General

Target

38dc14ea61046488db5529dbe4c65f7b.pdf
Size

34KB
MD5

38dc14ea61046488db5529dbe4c65f7b
SHA1

e1069fa68aa23dfea8e9c36940ada7e5789fa873
SHA256

74bc9c94a949f3f59b6db76d223537253a96cd3f4d05d916bbc10208156f8a20
SHA512

b608e3f2d7fd9f830aaa7d1724c95fba5e8e20d10b690b3ccb432671759f55b45737519aaeb326f0ee71fe5fb0a641726eeb9823c98dfcd50b749e8154d88a5f
SSDEEP

768:BCtthfLAKPoGsq3C43H9gEeY5JMo74rG0nTvTiwx:BqaKAr43HbJHY5nTvTiwx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2128	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38dc14ea61046488db5529dbe4c65f7b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
04b29dbf6be963571f0fb0c8502d0377

SHA1
15f152cca3be68857a3d2e35d1c600185dfbf3c4

SHA256
67a090cb776cf44646f0bf307aa73361202aa8ed71da4b4b2829687b9b96d0d1

SHA512
33edaa71543d66da968d901ca42c3222aa42b4e8a9fdacd22e7d745a2602cf12da7a4e71e02931ae06f7f2aec2237da164534b9047796c846e85e5d8d057baaf

Download Submit