2d05fd97cfee18b7745d36ce00299bd3be7f517564ee24ac0fecd57aa1984181 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11-01-2024 18:35

Sharing

Report Analysis Logs

General

Target

54455aa073bd61e1369e12c62c559e1c.pdf
Size

96KB
MD5

54455aa073bd61e1369e12c62c559e1c
SHA1

2fe91df09f27fe6ad0aef8cd63868e7259d280ae
SHA256

2d05fd97cfee18b7745d36ce00299bd3be7f517564ee24ac0fecd57aa1984181
SHA512

58a60e1172d186999cb81fcf91a1a783100e8bd49bcdd6216801e96011fdeaaa631fc3f4cd5d8a1c32036b773eab6d4c3f5e12397c59c666775fe75d2bf62eb6
SSDEEP

3072:rgUwazV4CmDH/jZoMNEdU3Aq6WC248Ycjv2DAbvl:r7zV4jjyMW+8n8YI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1960	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1960	AcroRd32.exe
1960	AcroRd32.exe
1960	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54455aa073bd61e1369e12c62c559e1c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4676c6eb76e6c4e9ba0c29999a0fb361

SHA1
7b260b68daa83e141f5acb2189223a60ffc05611

SHA256
f56d01b17798a80116b23f204909f7cefcd7afb696eee573d0f5efedd819e94a

SHA512
7aaebb9d832fe17dfcfca2d6778db84d0056d65d3a7771ac17e1c1e83b4711590b02af43d7154770cfa1a055fb881eafc5131e0a242a596e39f5e5c4fafff467

Download Submit