839816a40789f8eaeddb6c96e9fc2f4daa34b52afe7fe430c5a81e1f7c1c6b17 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

38221f9f529551bc5d92f95729fac7fe.pdf
Size

35KB
MD5

38221f9f529551bc5d92f95729fac7fe
SHA1

e173e9a394cb74250d7dd8c2697edfde05759b72
SHA256

839816a40789f8eaeddb6c96e9fc2f4daa34b52afe7fe430c5a81e1f7c1c6b17
SHA512

778858d1de82a134314a9f46dda75b4c8f2f9e57cd1a18e0729eaf3ec06540ef0a70e353f3210e539b7d3613e1a26a2b9e65bb91fdfa4913e56b4e5d969b6f40
SSDEEP

768:/7jOrBXWnSV6QZ762b4t3J70gF9ImllXe5Q/e3://Orl6Y+Xti4KO/M

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2916	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2916	AcroRd32.exe
2916	AcroRd32.exe
2916	AcroRd32.exe
2916	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38221f9f529551bc5d92f95729fac7fe.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4da45f4824f6f96bcce8e8bb0aaf9d24

SHA1
8636c3413d11bd2d7cf4053a68bb19ff19dd30e3

SHA256
07509f1cf2268c4eed15e9b233af421df307b309cb186fd7a2faa242ef93935b

SHA512
70c090841d076c5db184410c67192077493a26629ec368ba1e8905114e27d31bdd563e1feda3db3bc0c247254184f948a21abdbd3355bdd266664bd4b36ba71c

Download Submit