012c715efb96d7fd9d31e6e4e71f11e2aee137bc500c3b909a243ac068859590 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 00:43

Sharing

Report Analysis Logs

General

Target

425591439ea807d058b4eacecf7ca2d9.pdf
Size

98KB
MD5

425591439ea807d058b4eacecf7ca2d9
SHA1

d0c49e598b343eaedf36b0a934e54400b1fcd434
SHA256

012c715efb96d7fd9d31e6e4e71f11e2aee137bc500c3b909a243ac068859590
SHA512

f7d9fe3f8ddb4c60e15e48e262bde5e0e619a23ae45303fb04140821d3a22daec8b0bb0c8c51a64cb3eaaeaff557df13ac360c3ed17c52381878b604177c5793
SSDEEP

3072:sdmZguelsI9j3pEatcc9Rd4RxQjFCZ/zF:qIguelt9ZecDj8Z

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1736	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1736	AcroRd32.exe
1736	AcroRd32.exe
1736	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\425591439ea807d058b4eacecf7ca2d9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f57e223bb51c8efc7735f03098f1dd3c

SHA1
2aea09cf1f9f5ac1cf21bb4e69aa9bf7d2194809

SHA256
9784dbf4e1ed8d4dbb0ce2904772febc8dae7b41b0b0339fd6290e03a1098bd4

SHA512
602aa7976172edc6817470e3bb7c1d166422f577b0dcd4948f632ee0ca513460bc0809c4690a691d9194728379dd2d2e6765f451e6b02ac14cbd8180471773eb

Download Submit