0b23ba4724610a914ca7c3dcec50c4425f4b7316bdac24ece62f8749571d90e3 | Triage

Analysis

max time kernel
97s
max time network
28s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
10-01-2024 12:29

Sharing

Report Analysis Logs

General

Target

508fe65395ead28ea93789bd950d3276.pdf
Size

39KB
MD5

508fe65395ead28ea93789bd950d3276
SHA1

8b92bf1a074f85c0ca09121ae14a66171d18048e
SHA256

0b23ba4724610a914ca7c3dcec50c4425f4b7316bdac24ece62f8749571d90e3
SHA512

5fcd2d824741279a7f64bfa19cedb287b174c83ec1306b8919f2876e01c2062e16da6898efc9a8899209168ca44758f8bcbe169b48a11bceca44a7f338013263
SSDEEP

768:xgGzpDRTZPInjHQrRmB+LNfZrSt1YRhMx4B7ub:CGF9UQrRu+L/rStaMx27ub

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2184	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2184	AcroRd32.exe
2184	AcroRd32.exe
2184	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\508fe65395ead28ea93789bd950d3276.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
188532bb10ec1d79eff3fc99649ade58

SHA1
a6034f01e13f9a322e24b1caef0bedd6a5afe18a

SHA256
9caf79277f73859c835d3d885ef6f332bf50c248ccc0df28ae980b09cbd5ce7f

SHA512
7f35a09e3992ac4ae3610dc66ca54b5adb05f979094cadffebca90ca0a14f3305355f47afdcb1199bcf1571424caad7d7007ce094e340af64479d61c82b956ec

Download Submit