0961dcbdce7505cdc3e697b8e8e8ff47b519860f06007e948320590f683cfef0 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
10-01-2024 22:21

Sharing

Report Analysis Logs

General

Target

51c5315a677a3cf0e6d22df3df131b96.pdf
Size

35KB
MD5

51c5315a677a3cf0e6d22df3df131b96
SHA1

d6c436e532e2498b355c397885cbbd56e773508e
SHA256

0961dcbdce7505cdc3e697b8e8e8ff47b519860f06007e948320590f683cfef0
SHA512

54a26e4124261f6fe85a6dd4ed9e22a32ebb71666de64818d9c866698e7fd432b47fe3856b123c2b86ebbb1a452952532a54002b62e00595330b532ae6f7dbf0
SSDEEP

768:gBGM/evWLZdJiKZ7YT98tGFYhvl542fK0AYXc2eJu:VM/bLaR3GNlSqLs2eJu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2820	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2820	AcroRd32.exe
2820	AcroRd32.exe
2820	AcroRd32.exe
2820	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\51c5315a677a3cf0e6d22df3df131b96.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2820

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
45ce6531d2d697069fc14fefc608a0b0

SHA1
0543814946d628274edd09792c59db9173a96902

SHA256
01ce251ef1cf7f55c600d75d9c5e2ae44905b94e1d805b3193306e467a524b88

SHA512
18ae6e4aab067f5dbcfb9385c4721b64fff8f9ff65cf3f378a85342e843cbf83af3feb5fcb1b62a6e88187ab156a1a184f19f2a3d7e4304fadfd00f1847d5917

Download Submit