71c55d045fb661898803199b42d08e74c23b05f0e39e41cd556f7f3637d4e87d | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 10:34

Sharing

Report Analysis Logs

General

Target

58b48e6d6265110c752cb626ae4408d8.pdf
Size

107KB
MD5

58b48e6d6265110c752cb626ae4408d8
SHA1

c0bb9ed73a2a289f58ada35ba4ba944b94e16ae1
SHA256

71c55d045fb661898803199b42d08e74c23b05f0e39e41cd556f7f3637d4e87d
SHA512

ede472945b113403023a76b6e0890aa8c26d064a8516409f14a9593d7d0ae16e386c7c111de7cc82aab273668bee5a98317c827fc06c756ed27898720376f3e2
SSDEEP

3072:JQNItag/4T0vm1IyA+Kwtcx2QPcgdoIKD:Km1QwveawtQ2EC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3032	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3032	AcroRd32.exe
3032	AcroRd32.exe
3032	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58b48e6d6265110c752cb626ae4408d8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4961eafea35f421328dcc68f798a3af1

SHA1
b61528ac5dd9885fc793cb4eba8f094d19f4ca6b

SHA256
c760e4eea6bc041b4018d9aeb0cfa03f0de1b94157057571f6c4fb4a30057d73

SHA512
567392650dc71819ebac3c2edbfd6a108f20ad7d18509ac7ec6f1172700864b1247b61ef67295b7030dd95ebee18d8445d5907de8153eea73ebf31e6af39d420

Download Submit