7ccff3ba56bdc4913363a97090ae9bcf8d7dd2341e2ee9af69f67904a46f0983 | Triage

Analysis

max time kernel
118s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 20:58

Sharing

Report Analysis Logs

General

Target

446cd3f380e93982ba6c73cc9fcb90f2.pdf
Size

38KB
MD5

446cd3f380e93982ba6c73cc9fcb90f2
SHA1

1e65e8de2864548d76927e5821e709e7798f74a1
SHA256

7ccff3ba56bdc4913363a97090ae9bcf8d7dd2341e2ee9af69f67904a46f0983
SHA512

fc245f3c9b2fe78d7b4ce8b27ed8279c77f910fce2d5cfd9e96d40a5db0495c11009ba9ab6a95eb9aab7b13e02e96a7867308092804a0862760f2c5161d92aff
SSDEEP

768:0ofpDgOdyhgykFs7ZnHX+IvKztKyCHrUDnZQ6Jw3P:ppEPgyOQXkOHrk3w3P

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1216	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1216	AcroRd32.exe
1216	AcroRd32.exe
1216	AcroRd32.exe
1216	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\446cd3f380e93982ba6c73cc9fcb90f2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1ee1a63b4e5ae95eb7513d0bacc48dd7

SHA1
54f813fc80665ee0d9839666379c745566cb0b52

SHA256
1227a8743310730a25765370a21efd2fff9f5b70a19a112a31fde04ca417b8d7

SHA512
46121a604a8c00b46ac68185aa1d9aa857fab4990675bc32ea37847de7d0c3d12f0108f9d4b1be5671f774f2374045603b42ad8d9ae5dac46790e9818962160d

Download Submit