6dc4f042726a7d847d5c7c082637c7186a1706bd7ceb9db30feeffec816e164d | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18-01-2024 21:58

Sharing

Report Analysis Logs

General

Target

66233739f98ad740d6d5e5597cc5fe46.pdf
Size

96KB
MD5

66233739f98ad740d6d5e5597cc5fe46
SHA1

fc201c1fe55df9f15ca13b00649eaf9f92dffbf6
SHA256

6dc4f042726a7d847d5c7c082637c7186a1706bd7ceb9db30feeffec816e164d
SHA512

c403aa8025b7ef2f5d3588acb83c1d0521b683daf283b492b8769c8f7f4206f7650e19bdddc104751219639f2c19567ef48e8a5fd726726c23520616a7e1bc5d
SSDEEP

3072:PuSRsNCPj6t+vlLA4NiF6+BDuwP3lRFke39:KV8fiZqOR7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3020	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3020	AcroRd32.exe
3020	AcroRd32.exe
3020	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\66233739f98ad740d6d5e5597cc5fe46.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ead9111ff174f567036abb5d900fd96a

SHA1
7d143d5ef181332506f4a489347b3398e810898c

SHA256
3c6f12c905dcf10f7e54c148d96bba8606f2d503b5a0079cebddd93417ec5508

SHA512
b4a048c462c09a842ba853c8658fdb59773c9f801c659b0aca3e72086831a82bec4d2960036b00ed0055180c8d4520d15cbbd2d4e6c1bd9a9c44bc93d0cc6f04

Download Submit