a2530d6374730b1e608842248d74186a8ec43d4162bdbf7bd298ef0c9421f2ab | Triage

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 22:16

Sharing

Report Analysis Logs

General

Target

662bb21dd904848356a97aff2c356b6d.pdf
Size

35KB
MD5

662bb21dd904848356a97aff2c356b6d
SHA1

6aa26a8422c982a122586ef0e928785d31792658
SHA256

a2530d6374730b1e608842248d74186a8ec43d4162bdbf7bd298ef0c9421f2ab
SHA512

26b5072ef60433bcdb7273cc02f9c0859dbe94a5b5000e123a28d1d3c2ed364780d85e838e3a2214d2fdbf7ef791b644f52863199387157905f84afa3b4f1ff6
SSDEEP

768:t49HXP9EVc6RvMU+6fbBLyz89ssA87bityKf/p:sfmVc4+quzgPAGut/p

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\662bb21dd904848356a97aff2c356b6d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
84f61b5a5d62e6e3f9dfcc9aeb815e62

SHA1
0c4c6d2d8fe959073eced947b8b4da7a441e59c9

SHA256
23d30bc7420005cce298026f29e4746f655467fbb6a3553d54f723628d70e8ef

SHA512
185e0c696201ecfb5b0c33a33c3ecc445c3dcb7db9c87f0b39ba01319229c9e6cbd1460bf6e6d29510d4a665345d24405808e113246697824224b208c072c4fe

Download Submit