ba8917d93faca348090eb9d54bbf6f4e9447c4876f8ca9bd8c370d7fb32786a3 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 02:04

Sharing

Report Analysis Logs

General

Target

59fe81f044222f52b0f8a85b1d162ab4.pdf
Size

35KB
MD5

59fe81f044222f52b0f8a85b1d162ab4
SHA1

700cfdb88215d2c7a9cf20d6e78f95e4e6b856f6
SHA256

ba8917d93faca348090eb9d54bbf6f4e9447c4876f8ca9bd8c370d7fb32786a3
SHA512

2e1ee477e85b11d57577bbb2ecca811ec568705e04f594bfcba9a260c5dac1ebd159a79d2a976edf31823d4ccb3dc9f040b3f97e228e0c8276e75a40061ea18f
SSDEEP

768:+9qEnQ69QvoJXU9a2Kw0+9cqqS94xzfuND7:9T6tXAa2G+9cqqg4xCND7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2928	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe
2928	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\59fe81f044222f52b0f8a85b1d162ab4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e1c8bbead1df97019108d6805e4c4610

SHA1
59c32e7edefcd540b9a91c5828df9efdbab59b12

SHA256
d6d30baf421bd5173b4da7d86fcf48df8907e418a7a0ca2abf51519497684a45

SHA512
25709156ea569ddacf2ababd02cef1974ed4a3f8dec93fcd261c133d7f5da3d1940bbff3e8104dec9797cac41cb3797aaa7046efb34e6098292b28f886d16c03

Download Submit