1fff9db28d75714a0284ed05c6580d1522413753733a14e65d9057cba5d29af4 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/01/2024, 07:29

Sharing

Report Analysis Logs

General

Target

585617901259505dcee8bf172d2a6a8e.pdf
Size

48KB
MD5

585617901259505dcee8bf172d2a6a8e
SHA1

f7866d6945285363ab1e3119756d267803512fd5
SHA256

1fff9db28d75714a0284ed05c6580d1522413753733a14e65d9057cba5d29af4
SHA512

289cb3b9b6244bea72771f1083b02a37b29bc48fb8b8eaf39c9bf59d74132cd3836b38f3d40e1d469f0acc36d13a1741c33833f696395f7c8f006b430ac7d0a0
SSDEEP

1536:GSFZ4IcFtPcjOJ7Q6nTOlwiJKr61fTQlJf:zFZ4JFtPf7Q6KwiJK8bQlJf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3016	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3016	AcroRd32.exe
3016	AcroRd32.exe
3016	AcroRd32.exe
3016	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\585617901259505dcee8bf172d2a6a8e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3016

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
73bb711f5ceb3d10a01959066c6e5cc5

SHA1
da92a1d708d238afc7020b1da8409886894fbf04

SHA256
db1ac25ecc213ee8510a4f044ff86d8acbff987f316a58fb6a0134141323a468

SHA512
ef7bb0b21421b20434e9fceb1fbaf3e9d61d140b169022b15ca9be64e6502169d7ea202574b2662be8659a2b84edbe1a446825bdeef9ced1b49012c546eea441

Download Submit