d0ea551fec4845b0ee1abcfeb53cc7ad9e569c4be772040169032bdfa85e13d6 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/01/2024, 18:19

Sharing

Report Analysis Logs

General

Target

6ffbe05e69a1f570ce55d06b1596a3b9.pdf
Size

32KB
MD5

6ffbe05e69a1f570ce55d06b1596a3b9
SHA1

b7ce844e5d499ab69add76e1213b9d72567314db
SHA256

d0ea551fec4845b0ee1abcfeb53cc7ad9e569c4be772040169032bdfa85e13d6
SHA512

c1e9d2b112b14bd2c1da714c2fea52871c8bb98681b5af6cd05ed56d03903d167918ac01acfbf84a937fa041d9aaaee8dcefc36248e30d1e6d88a3f4dbaf44c7
SSDEEP

768:2cF3O7OfxKlsbU75nR3Ws2vy3ditsmjPt/0yTQ:2CO7OTU7JpWdyNbkPt/0yTQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
660	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
660	AcroRd32.exe
660	AcroRd32.exe
660	AcroRd32.exe
660	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6ffbe05e69a1f570ce55d06b1596a3b9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b9674ed72c541057218ddeded330fe08

SHA1
1eff9400b1b77e557bd677fb25cd1fc257efeea5

SHA256
3b5af4aed2090b646765c9ee2e0e5be4ba7e447afa781f3197953b09ad3658a4

SHA512
d67bfcb4ed5e541b7eaf02d9e7ac4759586fbd62e0afed34c710fd6ff5db59ba6a5240d2379cb425e24fa69e2c1909dfe7874e52c39387413e55ce03d5985c14

Download Submit