97a9596f4f01cce1fa43c708d361a1a0a8497a1fcc715eb0dc36a60794dc4a8c | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11-01-2024 16:10

Sharing

Report Analysis Logs

General

Target

53f95ee17c6ac7130dfbb206a4bef417.pdf
Size

52KB
MD5

53f95ee17c6ac7130dfbb206a4bef417
SHA1

769f4734e5081ae6c9892d32f934fab4e299a626
SHA256

97a9596f4f01cce1fa43c708d361a1a0a8497a1fcc715eb0dc36a60794dc4a8c
SHA512

8eee7bac05241a4af8a2d8c1dd09f0ee766cf4994b871594056711d871aebee77f4a9129b7d0d8b8c24d1edd969343b1256ccafad3e439ca46f754dca87527f4
SSDEEP

1536:Yle3pVJeQnNDDa7QxhIZfV8gg3Zm5ZXI2Mj:Yle3kQnNP8Q4Z9AZm5BpMj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2224	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\53f95ee17c6ac7130dfbb206a4bef417.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
722720d15c6e227778ea22dfbf244447

SHA1
2b6405a69d82b1ad139cbc30a9e174614619e7bd

SHA256
84a104343e0a88be0f8d23f1b07ccd44215ce83cb2a8df43519c3bad8d90750b

SHA512
b87a05974318afe1731697e116a5d83df651adbd6d0d9b8ebfdbdf291bf001339fe22a9f4f7aa772ef76f66d92d43a7985799743205fb766c2dc1176b10e9b25

Download Submit