2428922556bc7f04a751b5095feea97bdf388359b1efd7f98d8d195d965c25c8 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 01:27

Sharing

Report Analysis Logs

General

Target

59ea0d0fe74e3428dff1e9073383ad1f.pdf
Size

33KB
MD5

59ea0d0fe74e3428dff1e9073383ad1f
SHA1

6c5bc6da81f5b4c726dd63af0f90e89c2a973896
SHA256

2428922556bc7f04a751b5095feea97bdf388359b1efd7f98d8d195d965c25c8
SHA512

4c0e7a4a0dc73b472fc386e507ead0fda1c8a6cbf5005aa778e951d13caf9755c1be3a4ec15db004967dc45b69a04576e565c69b6faad2c6d30323947364b539
SSDEEP

768:4u1lp0CFrAK69Vyk/uNX4GxgEvK4nF3YAFiPraqh+my:7J0L9KjZvKfAkmqh+my

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1940	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1940	AcroRd32.exe
1940	AcroRd32.exe
1940	AcroRd32.exe
1940	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59ea0d0fe74e3428dff1e9073383ad1f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
eccca1f487d14e154465986518565130

SHA1
fcc8df7c8bdd9703c06c1487cc46c9d16d7b9e0f

SHA256
a1bb1ea820f517df6527f6962415460c7c823a2fae3bc404c524a8e83b615eb7

SHA512
fb714e6c8c87fe7354a10cc865282bd4bdfc24248b8fb30636504d79d1bdfd49535978df5a2691006765fea7732ba68f985ee293b0192ef6ca8fe0d75ec1b91e

Download Submit