97004ad50a271221bd6ae601c9e968c99af96f659edfae46405f08bbc9a68e81 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17-01-2024 18:56

Sharing

Report Analysis Logs

General

Target

6358a915e3ae065b1d28e5fce1127cca.pdf
Size

98KB
MD5

6358a915e3ae065b1d28e5fce1127cca
SHA1

4bd6a7edd69f4d436073ac2bf2f855ca8a727a63
SHA256

97004ad50a271221bd6ae601c9e968c99af96f659edfae46405f08bbc9a68e81
SHA512

265cfb2c2c59c3b9909679f018ba009e6085edce76bc1c8edd692e997de89a2004c999e6eaeee0a8453e2a986f4caf8ae11ae81d18b5f72b5de83415588b81de
SSDEEP

3072:fnSq2puSNyS+cixyVP+mcGcrWyyxVKb4MuMe:/V2uQyFcixyVPmXtyyC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1064	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1064	AcroRd32.exe
1064	AcroRd32.exe
1064	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6358a915e3ae065b1d28e5fce1127cca.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
75eddc6d53a5dc8ad8c22922ee8898b4

SHA1
b4773e8d6463c6f293b8400b8f0508085ca999bc

SHA256
934e17dae807a663c28da18ba9344d680108951c324c21875df8b6e7063b1375

SHA512
6d99544b8c5c68bb1c66dd7da1f41a87c120521c0fde6e2b65d1e04904c47227862d820b519c1a48904debe532668ddd05debf05ef2b71e28ca0a155eab998ad

Download Submit