0da75bdc62445f0988eaf4f8d29c2ae7e3274eedab08a695632c5040252ec3f3 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 04:25

Sharing

Report Analysis Logs

General

Target

57f9acf5186141160d0669067275433a.pdf
Size

33KB
MD5

57f9acf5186141160d0669067275433a
SHA1

a1f3c9936ba91e433871139d61ecaec95d793c68
SHA256

0da75bdc62445f0988eaf4f8d29c2ae7e3274eedab08a695632c5040252ec3f3
SHA512

7a318c8f8d38a9b8f4f52bb4e1c2faf317e39e024a59e69e6aa187492673996127aa6dd35e2b105f7b220c55c8a09f1d574453501415805ba110a6bcb65f907d
SSDEEP

768:kJ9bsn4BZyDua1EAJ0q6RoUuyCTXrkVf9o:w9YPqA+qYoUupb6f9o

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2412	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2412	AcroRd32.exe
2412	AcroRd32.exe
2412	AcroRd32.exe
2412	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57f9acf5186141160d0669067275433a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6e0724e11673d03d98c5d69d5f4dde56

SHA1
e8bbf66c021841818a97694790f00c3d914395dc

SHA256
5f3ae52ca1819419607698e9928370f05166c445910220e5e87c64539013ff59

SHA512
8633c6d4360d1f37e1fdf1eb38c3bbf0aed65e78083ec5ee609bdea621c758c10f13c41fe7c7eee29fbc5c8947db412ff93b8601eecbae138575b5ce714cee82

Download Submit