cffecedd229e28759e4b0f0f6035442f277f97d9a129c84cdfc198bd944aefba | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17/01/2024, 23:15

Sharing

Report Analysis Logs

General

Target

63dce589bdfe17dc490a5ceddeb914e6.pdf
Size

34KB
MD5

63dce589bdfe17dc490a5ceddeb914e6
SHA1

c2a647351ed03fe9ba8394aaadfc1e254b04cdaa
SHA256

cffecedd229e28759e4b0f0f6035442f277f97d9a129c84cdfc198bd944aefba
SHA512

c9ffc90f5be7300940be7528ca10eff9891e88fa76292f0d46973a41a9b1538089f3e8cd47c4dd884913fb16720377f75c3ab3f5c502967517a70d5894433ac2
SSDEEP

768:5x25KPRsmDkNuXl9iXWDkWJHqld5TCNH5t1Mbzc:X2yXluWD3UBTClOzc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63dce589bdfe17dc490a5ceddeb914e6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ac5ca6b6115236fc4c5dfb096d4806c9

SHA1
5ae6b7c3341794981ab804c2ed08a4d6a2875aee

SHA256
7dd08e3a4694efb3aabf1086faf206219ffe8dd8940ffbd59c1a99f88e2d52f7

SHA512
9f367181469966ab231f8da5712b48df1d9480ea7a0fdf0ba4555054034acfa3efa9a998bed89c752474ab89057c229e3cc6803855e37eb7d18c6db5617e5ef4

Download Submit