0611f565e46b1ef722caecda575fb761059232f2632e2a0c5baf412cd958d4cb | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 07:15

Sharing

Report Analysis Logs

General

Target

55d21eb920514ef583606286936bcd77.pdf
Size

66KB
MD5

55d21eb920514ef583606286936bcd77
SHA1

e2e116af2e77de6f9302d7e5dac0bee4ac65e631
SHA256

0611f565e46b1ef722caecda575fb761059232f2632e2a0c5baf412cd958d4cb
SHA512

583c93f57c2d860268e2bf98bf3297fd3670462f7e621b47372dc01e22ae892aa7c7fbd1db6cd669bfefe0c05e54a2e02733d3802ce3e3ba519ca9d24466ca8b
SSDEEP

1536:FbwuDk+GvaPvmpqCDoL9YsxWgPVxlWLoak6DBl0XgHC:TZwa2pifW6cvZDBoyC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2148	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2148	AcroRd32.exe
2148	AcroRd32.exe
2148	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\55d21eb920514ef583606286936bcd77.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
350556a1bccd0b4941f8b4a57a3a194b

SHA1
2e50708814dd92c9dc2b1ea2767fe54fe8cf26f2

SHA256
82a533ec748bdbf8ee89ab750e9d92a5c94544287b5660adf65fa05bd7382e93

SHA512
972c974c4827f05f7dd2cdf0cd19479e007a07e8feb44a26d88fe00d4c8601de3f4eda6fce5589f40d7a165c69b0674d8fa892d9216f0c261655b000c1a7dea1

Download Submit