78819221dff0f45599626195eab61a37d1dfed6107e634030353a82464f81c81 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13-01-2024 15:43

Sharing

Report Analysis Logs

General

Target

5918e16a30e2749350b977aa087355e7.pdf
Size

51KB
MD5

5918e16a30e2749350b977aa087355e7
SHA1

0cc83267ac81d2f7207854c62053daf7286d7e76
SHA256

78819221dff0f45599626195eab61a37d1dfed6107e634030353a82464f81c81
SHA512

d73c139ba405f488d934bd0dca7ed5dc3d83c75a37ca20b5f0e774b8db48244dac68942e854ac57c82b94b222ed795323f26aa3dfe38e64d009b741f1936a412
SSDEEP

1536:F0xWZzBopmPKA1Ug5iGCpvqTOeBJBOpy0bfcxo:GizBocPD1UgEGAiTOYJB4Rcq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2236	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2236	AcroRd32.exe
2236	AcroRd32.exe
2236	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5918e16a30e2749350b977aa087355e7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6aae897b1609499975122037d716a6d8

SHA1
6a433e23fbbde8cf54e3fb2d16b4960d3c240b87

SHA256
d395263b9230209f0f67036729737079f1555b2c81836256a85ea8af26c6ef4c

SHA512
55eb845c80039ee4991a4fc166b9747bc1d699b2249c39a53c6dd535d4e2be2a9bf4fc4d54345275ecc632803a77b9de0a1a526cdeaf9d9967cb7b2a9eb66969

Download Submit