d341f467198193a6bd3c575b1d161c2f5aca0e1cd8f75cbee119305b0fcf788b | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
15-01-2024 02:10

Sharing

Report Analysis Logs

General

Target

5bdcd8cb69a31b7d64667586d9c3320e.pdf
Size

102KB
MD5

5bdcd8cb69a31b7d64667586d9c3320e
SHA1

54d4635213c838f146aeeba5fe172cb62947049a
SHA256

d341f467198193a6bd3c575b1d161c2f5aca0e1cd8f75cbee119305b0fcf788b
SHA512

e2bb9bad8b922089f5bc32b629e50e436b7b83639c35456ba2f54cf1dd015dd6461ce2493e47cfdb91d58bba0b94f71da902d7fda432f517678b91225d1d0657
SSDEEP

3072:i3kgnhaR3rCZnalLl3343fJmJ2E988Zae/R:xGaupapaJC9XZz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2668	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2668	AcroRd32.exe
2668	AcroRd32.exe
2668	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bdcd8cb69a31b7d64667586d9c3320e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4d7d72d2e6883fa7d7b6bd9014b5cc4d

SHA1
4956c59b0c6daf76d7810004129da0f990036404

SHA256
d6964ecf6b572a8d27b300521e0b53a537f02c78c8bf4d0e10c8396b570d7261

SHA512
55536d4248ada1fc30e8c19bffc8ba525aa62c7b25a55532b53f45d1b01f09b02c8c44d573b10746a796513f8c7759ec4515342dae6334da9661c8063c8e06e3

Download Submit