7810a164ba335e4341a3d6fd50d07fa4452d278c95f0e05f75ea543c3b20100b | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
15/01/2024, 05:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5c3dedaa2ede5dad25f3af2db414948a.pdf
Size

33KB
MD5

5c3dedaa2ede5dad25f3af2db414948a
SHA1

7c9bb623204ecf80d2cd26bd89d892f802216b42
SHA256

7810a164ba335e4341a3d6fd50d07fa4452d278c95f0e05f75ea543c3b20100b
SHA512

d61034241fc7d2d1ca93d7c7f0c4d6ecdcc610ec88c4d06228ac5ad7a5eed05d76e098909b0eaebf4a19eb2818576c3ff52a1619092df2be300c5377c6bfad50
SSDEEP

768:bZyOSO1GmnMsY2ei9iy2/qCCWt5dsuLoEVhWQwk9:lxbJiPCWt5y6ogWnk9

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2128	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c3dedaa2ede5dad25f3af2db414948a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
29246cc2b938dbecb20e93db2ca16a8b

SHA1
b58ce9f05292e7ad0e94a75f377089e57ec8182c

SHA256
b36e0eb1d7c4e140419477e4c444a57cb9cc33cd59e83036937dc37f6ea36515

SHA512
ebdc83b52f3fa8012e695347a8da2ff6c04c0fda2f8a7ec578d1776b7dd3e9b0d4d9700907e635d0b82a557bda807fa1705caa1e07468ca752beac785fb89fb2

Download Submit