655f2487bd4956330d7adf14d34a4ade454095abb95d556fbf28af30770e54b2 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18/01/2024, 16:15

Sharing

Report Analysis Logs

General

Target

65789ba8e63879f06d80588e01e5a037.pdf
Size

132KB
MD5

65789ba8e63879f06d80588e01e5a037
SHA1

4b12edbab406650bad0686abb6a796b592d480ef
SHA256

655f2487bd4956330d7adf14d34a4ade454095abb95d556fbf28af30770e54b2
SHA512

5021a67031df0e5007a25f6f1b3e9d65ae7d015587942b939d76f13b66bf74b5f7ccfc318d8187e9c5ef7eb7b9f51be9e9eb65cc8cd3a5bd77cfb78072416d3f
SSDEEP

3072:2+kkCYPJ1YT9w94TDz/D1JrLYmAz/QKaIQsR/qP+:LV3X6TDDXrEmADQKCP+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2416	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2416	AcroRd32.exe
2416	AcroRd32.exe
2416	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65789ba8e63879f06d80588e01e5a037.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
66856ff1b9cc809ef4eedd96463f9692

SHA1
2789b9723d169e81c53e7f3488e5f852f01d3cf9

SHA256
b4df917d61eba6219591b301d45b644ee4ff9bfb83f4faa83e50b13e5e29cd96

SHA512
afdc5ab849ac1f1170038e47962bb8bd5f4e627628e3e4529a616d4d5ce0b3e0f9e61b789834668d2215957fb98c6808ad68eb1a02ceedc46db2654251bdda5b

Download Submit