eab99e5e098d0edd78fb0b6b013ce8d8238d0151aee291224d93f5ac16a5b716 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 03:55

Sharing

Report Analysis Logs

General

Target

57ea1dfbe751e3507813355bcdaa1f01.pdf
Size

33KB
MD5

57ea1dfbe751e3507813355bcdaa1f01
SHA1

d09f94166de3b67798bfa88b8473610330fdb1b8
SHA256

eab99e5e098d0edd78fb0b6b013ce8d8238d0151aee291224d93f5ac16a5b716
SHA512

8e3d02d1194a64eeae64eda46fbf77ee5dba06989d1ad3aca3a4693447069a84a5ba9bd82810f625b003260df5b9b2b3b0008a7768f9e95154d5974f3424a838
SSDEEP

768:mmVMlIkpGsHyRYWDn0T7Fx1qWhVk0dWMk:YlIqTOD0j1zeMk

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
880	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
880	AcroRd32.exe
880	AcroRd32.exe
880	AcroRd32.exe
880	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\57ea1dfbe751e3507813355bcdaa1f01.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fdd33644f3f03c6d62514ef04d42ac45

SHA1
01778c06169d3369f46e00cb01dd1beaa10d1dfb

SHA256
3fb4f766ffc6d145b8e2d96d29f4ab1f729772ae65433e1cb0ce1093123ae5be

SHA512
757ee9030c9fa9e98bef3d9d5d126353612e7ecc432505bbd96cd7189fa78f63847e6b19911946738691f7c7ba4f9b1c4dc0b01c8a907010d690f85143c06231

Download Submit