be566620ca5924ae56bf7967b1bdd55cadcd11cf7a72f237179b5d1a69372965 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18-01-2024 07:39

Sharing

Report Analysis Logs

General

Target

64d7ef8252e08296cce2bcdbb1289685.pdf
Size

79KB
MD5

64d7ef8252e08296cce2bcdbb1289685
SHA1

d0ed523ef66d7047d70fe85eab81404981470f3f
SHA256

be566620ca5924ae56bf7967b1bdd55cadcd11cf7a72f237179b5d1a69372965
SHA512

03443fff74fd75bb5c879dbfb3635bff4bd3c2b81397b6dec00509b30b4a1e8f786d90964811db52db114768c23a9a5f7c3ee118819df5563d5109fcad103359
SSDEEP

1536:uiHMQK2jBqTS77pcyul0QW4Y66DfJ4mWOpOaZmNgesg:HB77ORl0Z6m4baZmNgM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2468	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2468	AcroRd32.exe
2468	AcroRd32.exe
2468	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\64d7ef8252e08296cce2bcdbb1289685.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4d3469f6c430fd927fccefaaca9fdae1

SHA1
0b461aeec06b18c44c2bf7b54bd41984a196c34c

SHA256
a87be177d952faeb8ba6c1a03029869d4f608f402ad4936e7f09ccdd655b3b4f

SHA512
6d3bfea1bae04d172e344f5bb3903c045b3ff92f914079c755ca9c314b75b36bc4a102cef6ea78a23a9230741561c5a36551fbdf8711dbe1028891913e1ecc98

Download Submit