0e5f5c2d8cc690fc6981a8917d9efe7e7b6dc8dab87716b92c869e4ae46f83d9 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 05:44

Sharing

Report Analysis Logs

General

Target

456ef1903c1d4c2232e70d31fe6cf9b7.pdf
Size

99KB
MD5

456ef1903c1d4c2232e70d31fe6cf9b7
SHA1

df33cffea4b3404a5fbd4ccfae024108acb3a355
SHA256

0e5f5c2d8cc690fc6981a8917d9efe7e7b6dc8dab87716b92c869e4ae46f83d9
SHA512

723c54a7495da9f41f38e97b6d158314a158b352a358fb0fb3c18b23b46a6884c24b1c7edaccee3b2f8f96013ff1143f1cac189fc89ff62760960dde9f47f80c
SSDEEP

3072:+PIVR52j2lUzGH8O07iUA/zhFoswr581Z:+PuR5s2lUCHy2/zTym

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2948	AcroRd32.exe
2948	AcroRd32.exe
2948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\456ef1903c1d4c2232e70d31fe6cf9b7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5e22b08aebb726979e6f3cd9efc1a2b1

SHA1
fe4dddc99a77eadb4137b166d00bbd093f67f9fe

SHA256
e929a57b366f1f2ba9be327b342149a288aea473299ef8e10d756b7b61e75136

SHA512
38a89ecd9502d2f711f28d091e694377903d5e69d52111b01eaefa8fcb0c9228cfd0d582566df656939c9f0a3f7b8552e7cb4d92c04ed648153d47c0b53a96a3

Download Submit