781ff976fd3116679b797af3483a7a201b887f5090c8cd517fb1693172c4a5de | Triage

Analysis

max time kernel
132s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-01-2024 14:20

Sharing

Report Analysis Logs

General

Target

4116f3c67e3e83996e7de3da771617a7.pdf
Size

16KB
MD5

4116f3c67e3e83996e7de3da771617a7
SHA1

4363fc6636ca153e40b771c557f015656472f648
SHA256

781ff976fd3116679b797af3483a7a201b887f5090c8cd517fb1693172c4a5de
SHA512

b7cf2fb010da85340e25b86cf8d42a860729c29ed639b29bb6c570fac55e9912c5d2cc2f452fe77eac5e5113100e72bfdd606a2ee31291dab4012c75648e5cba
SSDEEP

384:iNsFlS3K6XgKV7cAgdOpW+05fprdvwOb8rYptZ+:iRgGzpDypJvQg+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2296	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2296	AcroRd32.exe
2296	AcroRd32.exe
2296	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4116f3c67e3e83996e7de3da771617a7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2296

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
89797742b61382f5e205441022565eaa

SHA1
14e671c926082d0cc7102a12a8740e3b178cf6d9

SHA256
a9b02d86b4c4f161b93aab9c1e4376edf6e0f0f18195d8aa73fec7d881133b3a

SHA512
0584b5e8eed46ee32cb6f3c3bb312d1b3b59b8eb0199a04bd5e87113436056c5a33af6088c70943d59a7a4baa4cd57646d3c1d06fa148b1859f51c68855a82c2

Download Submit