aa7eb38ca6494306600fb52a63b02832c3fb560c7a419c736591013c1db75315 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-01-2024 17:07

Sharing

Report Analysis Logs

General

Target

570675a524051eed60e894b349b196e6.pdf
Size

37KB
MD5

570675a524051eed60e894b349b196e6
SHA1

72f2aa69790fc0c3903f85362c3105cbda3efc99
SHA256

aa7eb38ca6494306600fb52a63b02832c3fb560c7a419c736591013c1db75315
SHA512

046444b3d208076f8a0ba2a5467bca7321d663cd33c8e02dd338d999a715a76cf76f8cfb6712c33be61c598e918f56bee57c5ebf8fc7ee4e77e3358c04ff3e22
SSDEEP

768:9MER2sSGvpz6YiGbaGjLrPynFvarSRTvRTuZWh1ZB:9dR2DGGgyFvdRTvRTuy1ZB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2280	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2280	AcroRd32.exe
2280	AcroRd32.exe
2280	AcroRd32.exe
2280	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\570675a524051eed60e894b349b196e6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2280

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6d042c889c8862a882f48783aacbd455

SHA1
afd72fec8c6807b63ee06f84da7c356747f06505

SHA256
1b376d700dc93cddc8f66d52b81bdf8a3b892c3f61ee5d2da4c6bcaa1066fb2b

SHA512
a2bf1bd0762d762839267d57c4ab3e7b1d72b3c14d6699b2386671226c8a0f0e12e141d9a006d45f5ea425247afedbc0129c3131c318d897d35597a5375668d2

Download Submit