d4c85049ce157c989b60335427d6be492c0e3da7484b490257c39af4af55ee1e | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10/01/2024, 11:09

Sharing

Report Analysis Logs

General

Target

5065dbdfddcae88ce017d9a884e3644b.pdf
Size

117KB
MD5

5065dbdfddcae88ce017d9a884e3644b
SHA1

20cdd942df4af0135e9bd1d55a2f80121bcc67c1
SHA256

d4c85049ce157c989b60335427d6be492c0e3da7484b490257c39af4af55ee1e
SHA512

33cf34e9e5632e8e02ba582bbf70acc3861e1313f351e884d4d5c7259905838b14843e7c988bdadc4c19c10f489ecd1f88a3fc3b5cc6e8252a44b99806f9f9d8
SSDEEP

3072:4eDossghw3RqSpQ/QfdLwMesIMi/yECw0QF:nYsw3RqSpRZwFtddR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3024	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3024	AcroRd32.exe
3024	AcroRd32.exe
3024	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5065dbdfddcae88ce017d9a884e3644b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c52beb6fb678b04bf9faa56d03e0f0bf

SHA1
d6105ade636360641f431b2bfbabce0b2b5c92a1

SHA256
271295a2754800575f3ca9ddfdca801a9a927955a74122b849816f8c9065cfe1

SHA512
3a523320f6ec6fa7597182ae513ed217a41813995274511ab8f4b37a71327aaa911f68c2e967742e6df746818c3acf7403159969bb8a5a3b742e6e815db795f8

Download Submit