e768dd2db0b00fe51c1e32b9133f042e70908ab302d1cf892cfbf9c60b285dd4 | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-01-2024 00:42

Sharing

Report Analysis Logs

General

Target

59d50eb35f11fc32163da739efbf7b80.pdf
Size

34KB
MD5

59d50eb35f11fc32163da739efbf7b80
SHA1

27c26189eed8e8e558cd1759eb8a54505ee021f4
SHA256

e768dd2db0b00fe51c1e32b9133f042e70908ab302d1cf892cfbf9c60b285dd4
SHA512

400ce4261fd31cf95a060dfc0efa21aedb9bea9f8eb001aac7730db5d1dd67f7a6782ade886fb912b068597378db0a7f0ca7414e944dd2d45b58c522ce1dfe1f
SSDEEP

768:iB+SwtsSl+4QFfCvjU0VTqmUufOmDnQ0no:BSAl6J0w0ZqDuXQ0o

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2884	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2884	AcroRd32.exe
2884	AcroRd32.exe
2884	AcroRd32.exe
2884	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59d50eb35f11fc32163da739efbf7b80.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
91ea8f3cab06208e03754ff7bdf0e42e

SHA1
9d0810342c3c994d50669c37ccb1fb72a168a492

SHA256
667fc410f19cabe4ec7edc38141338e28bf509bf835e0fb13666f999f15388a5

SHA512
0cc9c22bfe87ce03dbcfe393710a2835f52ef2e37f2d0bf0f57af332aafe843a52273115f4e50372c588168562b8fd819a1d1521f0d5402007e8bda10cfdab1a

Download Submit