2ea2fc3465d3a7c3b5ce462828a35e375055082f9300627937f8ea9b4fd9f334 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
19/01/2024, 20:47

Sharing

Report Analysis Logs

General

Target

689a90cb213d2d023baf7c4f7f4b66de.pdf
Size

61KB
MD5

689a90cb213d2d023baf7c4f7f4b66de
SHA1

46632539c00204774c68ae5575bd2b0dc1695867
SHA256

2ea2fc3465d3a7c3b5ce462828a35e375055082f9300627937f8ea9b4fd9f334
SHA512

12dd7d603362fb02319a6828d1b6d7170573c24d7212b137376275fd5e28c747667b7d8920a47968c45f59e9b1891abc9e013415832bea040d28a472324b3dab
SSDEEP

1536:DUetCP890OyfFXNkj4ms+5w2f/6OWd0GG1eRjr:ZtX0ZNkj4Xk7SOz6h

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1220	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1220	AcroRd32.exe
1220	AcroRd32.exe
1220	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\689a90cb213d2d023baf7c4f7f4b66de.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
380e337ee42b4e5ecff56724767dd373

SHA1
4dea07e72f72dc41d7c7eaa923e42b3fa1bbc84a

SHA256
7d846f8c479d3f4447e79a67d652d4867fad122d1e9d458e699d6d5b64d41bea

SHA512
c815f1fcb80d1665893a2b4b16c48d2117a7106711305824bf58a12535d71708c2616a026c40b05565707c7a701f7dc25ca74bd494079bbd867e81502ea844e6

Download Submit