397df4ffa0e830cb83ab5d3346abff7b1fa22803d5ec2f2bde83acfb44a92d8d | Triage

Analysis

max time kernel
119s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 01:50

Sharing

Report Analysis Logs

General

Target

55299644200c4b3f048e2f94dcb5d8b8.pdf
Size

34KB
MD5

55299644200c4b3f048e2f94dcb5d8b8
SHA1

6a15b4fc5d7f01781eeec338f5529c02ce8d0ea0
SHA256

397df4ffa0e830cb83ab5d3346abff7b1fa22803d5ec2f2bde83acfb44a92d8d
SHA512

904180a1458ab4a83462263700838895af2564f2a9b5e898324dcffaab47b332ac52f6d4da705461e2d70b186985a4c2a709843a7e31a2890b1896769b40ab46
SSDEEP

768:fiI1ZbvS0wxbB/hUb4LQFmlIYQUDMGJYkW0z5mpR:aI1jwxbB/5LQM2REzUpR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2556	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2556	AcroRd32.exe
2556	AcroRd32.exe
2556	AcroRd32.exe
2556	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55299644200c4b3f048e2f94dcb5d8b8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2039ddc840104a6688718efa8377b3da

SHA1
4ce39976e21b12b16a63f4cfe21ad9ab5c8ecc56

SHA256
ef35f533a20727087acb08849cbe2a7e9d2e69adc0c16af0bb1ce874e8c1d77b

SHA512
f42c6675357779ce1f3a27b8e915c5db3a4cfd7013bfe6e0cbf29175f1e6ae7d20fa5674615fcc19ae45e61b1537fc155a442c108d1c6fecf37c7f79398cfd02

Download Submit