d257d42dd84bffe55afbae3da62b77cdb6addc5baf5282637ef26e2856b04606 | Triage

Analysis

max time kernel
117s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/01/2024, 13:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

568f0d72af5163c0fbc21934ff4800bf.pdf
Size

34KB
MD5

568f0d72af5163c0fbc21934ff4800bf
SHA1

7a7f7a96bd873d008c3bc0e31f6dc1b9dc334865
SHA256

d257d42dd84bffe55afbae3da62b77cdb6addc5baf5282637ef26e2856b04606
SHA512

eb6166493ab7346159a59e24b749208c486d3ee38b945cfd178dcc5a3792db7ace54b063f1abec0ded2357b17558f4dd94b5c409a7a45c19165b52df360f7679
SSDEEP

768:Hzxi2v3vPLjIyMMjKriPzsNvgCb1nSyF13R8:Tx7vPIyMMjKisNom1vR8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2056	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2056	AcroRd32.exe
2056	AcroRd32.exe
2056	AcroRd32.exe
2056	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\568f0d72af5163c0fbc21934ff4800bf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
867ccdec1c5d70b6f86266c046a7b2d9

SHA1
a1929ceae61dd01826ca854662d97ebd3b700527

SHA256
a00e75370a3bd6ba8cd32b1f131422abab4ce12e0b3ef5848377fd5787eecf28

SHA512
50c6e259d38d29cbee39c7e58d50dabb849ca3f09a05d7c557c13690227bec5415da0c158f5be52a7f60fd852a2c2f115d67e4d9d65ee39d03bf808acc529072

Download Submit