5a9f7056c9270eb63ec91e6df25243e8c47b2a885c1230cab8d961b97176ad76 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 11:13

Sharing

Report Analysis Logs

General

Target

58c77e262e058a2d02998d57539f6e4f.pdf
Size

69KB
MD5

58c77e262e058a2d02998d57539f6e4f
SHA1

975c5b92ac213585366782e6bd06ddf0dd63c4db
SHA256

5a9f7056c9270eb63ec91e6df25243e8c47b2a885c1230cab8d961b97176ad76
SHA512

f3367eaa080822436c480cd369f7218329b0a0ed1e1652c22054a3b5db860d89de4390c50afe3bb03acf96b0a867e9d99ed9e8bdf40718d8e834a6ee476faa25
SSDEEP

1536:s3pGGsq9R/Ef2NVDohI/0fHYK3IdQhmoYmT9Xa:KlsUWAom/0VgQmoNT8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1900	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\58c77e262e058a2d02998d57539f6e4f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c416e7469450454cdfdbbff00d76ab74

SHA1
d0efebf5690ab1467207e12161ea95b2bdf5bb01

SHA256
9fb4f49950751f13d2c9603738c26424c6dd06e46dd5ac5ae5a210c601265105

SHA512
7a169ec012373fdf9c741413d52eefb033ec30b66cf77336392af0ab94a203be4c8adebeb7d75e63d360539dc73efd2d5853e48ebd9edc7866d3f318ac7f713a

Download Submit