16d648c6a494ebff2e2b07ddacab52d25471003520df1b1df4cddb4e6b777cf9 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 13:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

53b4391f9654a376ff27df5cc7dd398d.pdf
Size

56KB
MD5

53b4391f9654a376ff27df5cc7dd398d
SHA1

1e592a47d6f70015db2ecc6666875e821edf142c
SHA256

16d648c6a494ebff2e2b07ddacab52d25471003520df1b1df4cddb4e6b777cf9
SHA512

398e9d7b01089fa8c62003cd3686a0bca44ba1623ff80a9cc97846bb48b3282ecacf61b2cc5a0547b149fd1752ccc720ba55533694584177c23a63b9defe179f
SSDEEP

1536:/GFxpNL+BMGcNLE/9PxJuv47BRfBGPIzq/:uFxpN6BMGcNSPxJlLVi

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2648	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2648	AcroRd32.exe
2648	AcroRd32.exe
2648	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53b4391f9654a376ff27df5cc7dd398d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fa8486a4a7f73950685b3e1f76004d28

SHA1
ce29b911f19d18fd09ff82c03ce17e488f0f5fba

SHA256
adb4a00dc0d50ddb3440dc236b3139f24f702416bcd336b78e21cd0e5669fbe0

SHA512
cf1bfb62255a7f1538cbae868c3257f146ead9e4d43d66a7db49e82e6a4d81232d1acbc7a50b7eb2f7e4877281f20ff339c7264bd85ade8641d5b1f822073a3a

Download Submit