99d65ae3377168600ce5a693f879ed1b696849965e9cc1671260952e698fe61d | Triage

Analysis

max time kernel
122s
max time network
130s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 01:29

Sharing

Report Analysis Logs

General

Target

522c560895add9367137cdcc2b172b3a.pdf
Size

34KB
MD5

522c560895add9367137cdcc2b172b3a
SHA1

adbd6badb744e9676c510d6b2df795b49071892e
SHA256

99d65ae3377168600ce5a693f879ed1b696849965e9cc1671260952e698fe61d
SHA512

570aaf2fd2da1b35405537fcd4912bb6679e771032cc29aeadaecf2423d9ae08efc63cd0ad086eb94667a3b517b7351de73d39176e96db2d04912a06bda4f751
SSDEEP

768:LSgf9LBOFMsxGEHmyHvuXVofo2DhWQotp7NqjyP:vf9LolRHm8uKo/JBqjyP

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1612	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1612	AcroRd32.exe
1612	AcroRd32.exe
1612	AcroRd32.exe
1612	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\522c560895add9367137cdcc2b172b3a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
31887606ad188f70841d8433f75847a1

SHA1
f1d69f8818b332f767732eca3102483ab0c4ec37

SHA256
796bdec9ed0bc909aa5fdf9afacf65d6c4028aa64d6ee0ac21328d19280140ca

SHA512
138213fb96d9b2298a51fb9025817be528db0f1dcdb139573303594300040981ad694bb53c6d05cac566e18c993df442cfa5206f810b402955099dc8f55015a7

Download Submit