fb8920f6d31bcd72d3c7ef3741c6491a457c2f4505dad83051a7a56e204bd989 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-01-2024 00:25

Sharing

Report Analysis Logs

General

Target

59ccbebe9f0a6d21e9ea4720c1aa5edd.pdf
Size

40KB
MD5

59ccbebe9f0a6d21e9ea4720c1aa5edd
SHA1

f6c8117ae0682689b9be98b43cda517bf6c8da38
SHA256

fb8920f6d31bcd72d3c7ef3741c6491a457c2f4505dad83051a7a56e204bd989
SHA512

95ec2d758eab55f882aa9807a77efa6ae3a89c0950543306302757b7871917644915bf2f1b093f73fc3c34520c7675a3a6f211713f07bc550eb9c3d91ce1b433
SSDEEP

768:rdklyp/Wpb9SdH+qvD2ZKhQ+CH412bF6e+flWfO6zs:mkVWaH+q2KhA44IlWfzs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2180	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59ccbebe9f0a6d21e9ea4720c1aa5edd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b66c06e774c5e4fdbf95b7ebeb885b1f

SHA1
787d2055e56b756e51a14e4ac419bafe5924ef15

SHA256
d2108ec02fe0d805ade496dfc4ebbd7755ca5a69e2e820229705420ad13c4e70

SHA512
b750ac9e1f56c58f60eb4c02c083052b3a834ef5eb35119b05f3154f1b416ed1040f55bc92fa34b3118ab9a59b7108ef09e8ae4831cf8c41ecb22bd61e6fb518

Download Submit