55f0e21dfb818efcbab82c7cf5dcbdb0507ad24a1d636cd9bad03f6a316f4700 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 07:47

Sharing

Report Analysis Logs

General

Target

671390a58d30cdb3a7865e43c01aefbb.pdf
Size

34KB
MD5

671390a58d30cdb3a7865e43c01aefbb
SHA1

1efc8a0c4e3d8f731f487e2f68afbf73f71a6950
SHA256

55f0e21dfb818efcbab82c7cf5dcbdb0507ad24a1d636cd9bad03f6a316f4700
SHA512

55c64ca77cd380a9f19bc05766846f3b7b1b3841ba535b8692c9fc3273293d66ca886371773d92704e636aae34d3e0ba3cc253587aec8661e09176dec6027726
SSDEEP

768:0wLsZsmvl6vFNGslMUQ6g0zn8gFHNwGY8HE1:3LxvFXMUQ6glgFiG9HQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2912	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\671390a58d30cdb3a7865e43c01aefbb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
76a66643fbda45afe206bf26d4ad25b5

SHA1
e6eab9168d592395a1b281ab0a10718254e25005

SHA256
4c0aaa076ce4287436ae016449e20ea18707ef9e03ee5b75efa79a27f37293b0

SHA512
5035d5cd7d40570c7dd6ebd2f1404631077994a664bc82b79c7af0e46001a7723962d04f0b2d8b3506e2f50f2e9895b983d64a3376ee18053c3f721554132dde

Download Submit