01498e6768a6a223c76274a654bb511f713ac5c08ae555390a8ee2aac2819717 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
17-01-2024 20:03

Sharing

Report Analysis Logs

General

Target

637b825686a3c8ea8534ca8c473f33e5.pdf
Size

109KB
MD5

637b825686a3c8ea8534ca8c473f33e5
SHA1

79befbf9d4f9a1444d8d24b21acb00ea3fabb017
SHA256

01498e6768a6a223c76274a654bb511f713ac5c08ae555390a8ee2aac2819717
SHA512

745bf2af58b686a48f6f42d79328c927720dfd5b9faf71c5cbdd589f1fbd48f83ccf6c0ff4de6a6e1d0224148f4d993d26d69baf1d2820489eeeb73eebaa0e0f
SSDEEP

3072:YIYBeZ5KigS0EoIzjZo4plTDJU8u1BnAfFQGUpFEA/n:/YBeZ55gSYIzqWlUlF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1340	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1340	AcroRd32.exe
1340	AcroRd32.exe
1340	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\637b825686a3c8ea8534ca8c473f33e5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
08613095442db17acea98c0ba0a47633

SHA1
c9f7bfb3635c3586dabb5c56a46056591479f734

SHA256
2c3ba3dc8978281848ea475854972b5cd644f9cc2a316479b655cf21387a0a47

SHA512
50fbd1357541e84ae66fda4f3bd28c9e66349b84882958bbf583a409206b71093afcf9b637ceeb01bd285b9c8e1c4fc49ada25a1c080af643c5d36400aed8442

Download Submit