18bbbce3cd9c7d53e784fa0b49ea3f497d7550328e232a1811156e144dcd750c | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 07:09

Sharing

Report Analysis Logs

General

Target

5a99a46200eeed33b0c96ed7beb2b263.pdf
Size

56KB
MD5

5a99a46200eeed33b0c96ed7beb2b263
SHA1

f1a745b19600d4c6da7e82fda570689d640db897
SHA256

18bbbce3cd9c7d53e784fa0b49ea3f497d7550328e232a1811156e144dcd750c
SHA512

37c8f50134a54f67b9b5a79f3ee1049ce70f5f7a2f14d830f79e077cd8f55c0aa677437bf25a427f7b5c4c1ffd19b2028a76aad220bf37a91af48531bbbf135c
SSDEEP

1536:ifbvrY69d2u0A1fV/r8SRgKmKmFwfLZmMnExMrYVYs:0Rz2HsVD8wgBKgwzdb/s

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3000	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3000	AcroRd32.exe
3000	AcroRd32.exe
3000	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a99a46200eeed33b0c96ed7beb2b263.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f848395c0d209c24a320b08408a29c77

SHA1
b8c855ea632fffeab06111a00ae8150ac9eb075e

SHA256
5a957c2b1d6260ea987a9de24f92409f02ae27e4d54ac70a163ab5994ce7ed4c

SHA512
152977771aaa33ea416cbb957e37e196a15ffdc22351b899153d3203a55010b2453db1245032fb1cdff88e3275e79eb0fb33dc7d3dad2ad9722cc815e78636b9

Download Submit