dde3ee0b95f95559d6f3a4fcc9038549291f973d7032b434f15ecc9756588081 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 05:01

Sharing

Report Analysis Logs

General

Target

6488093a59ab4d6368d81c88f4d81600.pdf
Size

100KB
MD5

6488093a59ab4d6368d81c88f4d81600
SHA1

37690dd0bbc94bb0d520ccddce03d5d76fa24e6d
SHA256

dde3ee0b95f95559d6f3a4fcc9038549291f973d7032b434f15ecc9756588081
SHA512

df4984b23ce49f5af566b16267098c54913d9e4598984f0416914ccabb4fbafa05d20658128d9c677ffbcbd704a6bbb0f198b1ee817d2cf33fc67cb23f1fcab4
SSDEEP

3072:+tnmcyTQ2AzmRsQ4C3bkVL9qbaRXJvXdOO37h:+fqYSsgbCVFt3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2096	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2096	AcroRd32.exe
2096	AcroRd32.exe
2096	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6488093a59ab4d6368d81c88f4d81600.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1a6cde27a8f3cd608d1aff8df03a6c35

SHA1
cb2374f0b28f32cad8cd05c0549662797f4b714a

SHA256
0e6f17b02e4079d7e6c6b4a0b24afa17448320935424cf65af17fcc96f451080

SHA512
f1d4411f8cf5daeed6162c31a10e57ba2788878a9d8ae778d6bf6d04a19ada9d6a60f749c9353969a97593e789e96aa378a765f78dc476f909688a5264ef5f07

Download Submit