41b92b0487ddcd266f96ba5cf271823bd32e8f7c370088b7379273eaa4d70271 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13/01/2024, 02:31

Sharing

Report Analysis Logs

General

Target

57c0831ceecf25531d71ba0b53a30fe3.pdf
Size

33KB
MD5

57c0831ceecf25531d71ba0b53a30fe3
SHA1

1fc31e78f7bd58d312388ab220729ea4f5b6f2ba
SHA256

41b92b0487ddcd266f96ba5cf271823bd32e8f7c370088b7379273eaa4d70271
SHA512

8d16242b7e17f7c10b4a99ce826cb85c23801913eb1ad2379e45e3470f946ad58a455afaf570a070a7af0c4b03a0f9bd52ccec61dbab3de599562918f2f6a188
SSDEEP

768:GajIwJ83EJsdWlWHrGfbmDt958/ntGyREfu:Gasw+3t2+Gfbmhr8/ntsfu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
756	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
756	AcroRd32.exe
756	AcroRd32.exe
756	AcroRd32.exe
756	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57c0831ceecf25531d71ba0b53a30fe3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ae61771ce33d6abbf5fe12ed27732b9d

SHA1
73ceef42ba361930f043fe85cd1749e946639a44

SHA256
1114fdb91c6431104a10243b9bcb6de0899a8880f6b9e60b2315c3d1467fbbae

SHA512
ceb2bb4203bed78d3aacb1e52f29726c02a5655eacb8557c4ef78ab262e5923c851fa95eb02cdc9a7a3b08360ce9f1b23ab65b6516b2bff1cf8d5511c702dd5c

Download Submit