1073700fe613310683e24e98a1340246373fcaab765677acc67f1b531496c064 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 14:18

Sharing

Report Analysis Logs

General

Target

5b744437222db783119efef505a320e8.pdf
Size

34KB
MD5

5b744437222db783119efef505a320e8
SHA1

00449a0c29161a7f2f96d7f2dad2d1d135f70936
SHA256

1073700fe613310683e24e98a1340246373fcaab765677acc67f1b531496c064
SHA512

5cadd961af7203df2ede5f3296cb1cd192c7d4c322e5b2bb0ffccc3538bd4a1ba0da6fd39592b8c3d8597ddc43c7e5ccd8415a200566b0afe21f2b982ddf4bdc
SSDEEP

768:h2IyvmOgnDuq2v+PTjkd3fUnPPfFfwzbLlRSd14:yvm592GPkd38V4zvlq14

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1648	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1648	AcroRd32.exe
1648	AcroRd32.exe
1648	AcroRd32.exe
1648	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b744437222db783119efef505a320e8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
352ee9ce22bba4b81d906bd5adcf2200

SHA1
642bb814cfffc2f1108dbac8fea899787db5e231

SHA256
2f3edbd7e79ccf2ad6650e1ef6670d6673eb664a5313a292c7521932a0ba378d

SHA512
c2803dd2ec9c65678e92a477a7048fcb53ecbe34ac2b3c09aa534a55b92aba260e04579329bfc3a19f4ed59a712d500420f7671ac49740cc0768b22abe2646af

Download Submit