0b8ac904ace860efc1b089549fbe457c1c4cba6f3f1ff7367d53b4635bd209cc | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 12:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5b3962870123557200eb4a04506e691a.pdf
Size

32KB
MD5

5b3962870123557200eb4a04506e691a
SHA1

7aeba0336225045e9185f07f2907e499b5677acb
SHA256

0b8ac904ace860efc1b089549fbe457c1c4cba6f3f1ff7367d53b4635bd209cc
SHA512

80395c3b518b206032f60e915e0f45a57b065851062789620ed8aa7a4b49d9945fd40ffbe3f39ad982099b9c0c3d9a3b530fdd9ea97d8867ee5d8b6079332bb7
SSDEEP

768:Qb+089nfiO3K4hT6052TVYJzhcUb6dIxp:tL64hTN5EYJmUXb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1744	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1744	AcroRd32.exe
1744	AcroRd32.exe
1744	AcroRd32.exe
1744	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b3962870123557200eb4a04506e691a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
cfe6b8884f5c1623701d07be9d4584e5

SHA1
74f8362ea4d8dcd192e6ec200a3a98059a7b8a76

SHA256
92087d815ca79ae01d5f46323aaee665378bf9850c705f8739c080211c6af211

SHA512
55ec458b5bca90fe08cedcb0312ccabe56f22f6f2ae51be9021c7d6ce43f3e0b3694aa5e5ed42db41814cffc5c4166a99ed5edaaa3a1f34ea3c59cdf35de519f

Download Submit