eecd2a8d7b58a97774eed6243de25c5d1b35675b56661cb307a8ada710f25a95 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17/01/2024, 21:40

Sharing

Report Analysis Logs

General

Target

63acc671de91393326e669bf4940c347.pdf
Size

44KB
MD5

63acc671de91393326e669bf4940c347
SHA1

0935ccb55d5bcc1dbc6db24955f72c8182b243a1
SHA256

eecd2a8d7b58a97774eed6243de25c5d1b35675b56661cb307a8ada710f25a95
SHA512

ece9ed896e329fe6a4a4d3f9b5128aaa6c9779dade061b396b91d5261e00e7f17026adb8d7d97506e507858dcd60ac2b6caf9a9a5497c7687574cf51f17f0687
SSDEEP

768:V4ghfYvhJA6X48dOtnQCAIcK7A+SR5KDEq5zllld3Oaq:ViI8An78+gQDEq5j+aq

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63acc671de91393326e669bf4940c347.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
286e77116eb7c4d41eda892921f2e3a9

SHA1
2dd64828f58cb54544c8c43ddccaacf0479f7204

SHA256
cd720055feca0982ae3d267c1c1c3fd2b417bbd7da8e4330b7e2a3d318d0b894

SHA512
a74c9e1e6934c55478508b4118c3c94d2a144a3619bdcf73b924a4f1915bcd0c6045bbc72c521fb82f80578d77d779ca0f0ad69763a6eea9ef45f7f2a2d4ad35

Download Submit