7309b489c9a891d403887b96fd55275c06f5afa58747e6a36afb925a872aa678 | Triage

Analysis

max time kernel
202s
max time network
144s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11-01-2024 06:40

Sharing

Report Analysis Logs

General

Target

52cecae689f2f2b4fa3a745599482d6b.pdf
Size

99KB
MD5

52cecae689f2f2b4fa3a745599482d6b
SHA1

49661881c85ef7e3e36d813d7091f45a8ba765af
SHA256

7309b489c9a891d403887b96fd55275c06f5afa58747e6a36afb925a872aa678
SHA512

b5da3b40a1813e57d4688e5b81c676074a0307623d7b734070910489f4c385cf9b645a4deb10f2c4a8b1338caf5864f0812b28fe2932221bd6ad7d47aa91570f
SSDEEP

3072:zhhRAXAGSIsVzsLb9xB21Nm03KGvtls+M:zj2XAzIgIvjB21No5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2556	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2556	AcroRd32.exe
2556	AcroRd32.exe
2556	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\52cecae689f2f2b4fa3a745599482d6b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
529e8d2213da286559461a60cd27f7e9

SHA1
2f16548b0ed944e1c98731273d1f033f7351a0e6

SHA256
86723a60466b73d685f52797513c39f71454fbd9bf063a5628464c15fcbd04c6

SHA512
b28555f194e7e42f9eac7e1e26535a87db03b945aa7859bedf38b1a63d95dffc055620c79514dc9dadf33682fe751aaeb7b6974d6687d291e69d6e04f7a38311

Download Submit