1420808fea4df0d49784c0a86973be7d571c6dcc3faef6c0d203e56120ed3aa0 | Triage

Analysis

max time kernel
240s
max time network
283s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

37ad695b452553219e7f93804e1e8f56.pdf
Size

62KB
MD5

37ad695b452553219e7f93804e1e8f56
SHA1

efb9c69c420cd608e3d742910b36241a25ddaaf2
SHA256

1420808fea4df0d49784c0a86973be7d571c6dcc3faef6c0d203e56120ed3aa0
SHA512

76c2ce1857a07b5479610e2dc62a70868a300ec1980d3fd65d01f06ae454a1738b7a13917ca1edce4f2917291c819577daa08aa888fc3df0909b7d6e7495370d
SSDEEP

1536:XWjYWji3+Vn/2kW4gXfwg4usf4vMArabfsF0Mtt9V:Qu3+1/5AfX4uUr6ab5MVV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3028	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3028	AcroRd32.exe
3028	AcroRd32.exe
3028	AcroRd32.exe
3028	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37ad695b452553219e7f93804e1e8f56.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6819489ee00ca8408f7eb9b5bfd78f27

SHA1
e52907af6673f46c496c64f88f1c0adf0bd0ca55

SHA256
8b91656f2e2aebf2e7b3f07c50da554089e63d22760b1e421da435050a52e804

SHA512
07f1ea5a03dced88c360f4dae4c44b922f82609f9747befb5631402a34a65438a10ca579195f4db9ee9248ec28a121d58cf7eb34de424fff1b6c4b1c6b589460

Download Submit