f9d27f8e199d5220d081e1e264cf00eaeb2b2b07ce6fae2b26e6f83f63c12d31 | Triage

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 07:54

Sharing

Report Analysis Logs

General

Target

45b088b8e89d82012b84fe784c6aa789.pdf
Size

35KB
MD5

45b088b8e89d82012b84fe784c6aa789
SHA1

8511b4eacb8a87e36f034eb2e3f30d3e4efddc86
SHA256

f9d27f8e199d5220d081e1e264cf00eaeb2b2b07ce6fae2b26e6f83f63c12d31
SHA512

b42d0945ccb0b15404b2f7d084f6d010ed9884d773f798f1b26ea81d99a06fd6c0432175d777236e0e07e29a429fe50f6d988067574aa9b054875f6261541a18
SSDEEP

768:IDJdG2skvcrEMILGqFtaTb73Gf1xYahdWcv+8t:IPGrEMBqFtyv3GfLGa+Q

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2432	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2432	AcroRd32.exe
2432	AcroRd32.exe
2432	AcroRd32.exe
2432	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45b088b8e89d82012b84fe784c6aa789.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2432

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5751713ff7eb844ef4af7da20fded5a9

SHA1
09d04a6065b86b1b5afb2078ee67663aa077558b

SHA256
f1bb5efb9b67722c5ab5f6df7982d0d1e379217ab86f7d85235b2a8e6b8d8c6c

SHA512
c1f59990c933b56bc7ab193697c19158b7f2f8b3468c0f2c5bfc0bf0a0c498636f4c0cea2a16fea9cc7ea1173f669b1bdf4a0093d7b47581b983fd1589949e05

Download Submit