d42dcdf16165d3f38d35b0d1681e2632df63012f6eb4924843e1eb231d0b3e70 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

53df3a0c539af9f4d05780e907deccde.pdf
Size

43KB
MD5

53df3a0c539af9f4d05780e907deccde
SHA1

ab490955fa3d8bd19d3f03fce094b5f5a681c050
SHA256

d42dcdf16165d3f38d35b0d1681e2632df63012f6eb4924843e1eb231d0b3e70
SHA512

efbcff22b0b860277d9ef13ea41c487a5afc032a28de4a9a901a19f7b9ea4eb11cec0065202dc68626455986b083e43859aa15a8a4d87fa35b09ecd395461513
SSDEEP

768:NTM8lu1hVF6qzE2xjNBAKiJ7qYsOYshg+8PIw6b:WDjzEQUj9hg3PIw6b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1740	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1740	AcroRd32.exe
1740	AcroRd32.exe
1740	AcroRd32.exe
1740	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53df3a0c539af9f4d05780e907deccde.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
afed03ad3e0f02ba4ed22cb0ecdfe68b

SHA1
4953f2df6ccdd7398edc0f5691f95676ad337765

SHA256
cfab6bb81cd4fb075e298768c850f13bdb0829b68e3672d68778501888ef5989

SHA512
d0ae04fd43f61e52b9731e1044dd80e5184d2f7ca6fce39779f470eea0328bd813953ce6e1f817e047b5949160e5bea9f4d287f5d6c39fbcee5ef7e34cbf87a4

Download Submit