c5db2a1244878c9aa5aab6413006e571dac090a12625124eecd04c4553d05806 | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:23

Sharing

Report Analysis Logs

General

Target

37d9ff0e134afba80c7aab719274aaf5.pdf
Size

34KB
MD5

37d9ff0e134afba80c7aab719274aaf5
SHA1

52c3373a59769df09d1900ea8baac8a3b0742dad
SHA256

c5db2a1244878c9aa5aab6413006e571dac090a12625124eecd04c4553d05806
SHA512

e3e7053005c5eac8f35438b46564c1b8bd5227ef91fb9327db665c73d9cdacd37f0d97cb8a1c02e1c60673cb393f4c773b31d705a7c4a0f455b13b6259b49851
SSDEEP

768:9l63W/Rw6F4AZJuNBEFS+yMeenqseoTnvAn:r6MjXZJuNBEQvpePvAn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2536	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe
2536	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37d9ff0e134afba80c7aab719274aaf5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f3f1495ea64a9af9936b0a22ee195315

SHA1
f0f93b0229e8e75169700e14498f43625e63368c

SHA256
869d62f8d1dd6618b58772e54056a2626cc1d9af653f908f52bb39b8c543eb8c

SHA512
67951f8c92b8b667c7c4a9a0103c18be5dc55ef6c6a10238e22eb4c9f2c74760622559d60f47fd00ec393809440c60f4644134db63f1081ac635c2b71b084e07

Download Submit