7d3c1739e8b9dc2855ec3319bd4477e559cdb0c0584beed2af94f82149752ef8 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
23/01/2024, 21:45

Sharing

Report Analysis Logs

General

Target

70a31f884a75236173d1ed9650a97476.pdf
Size

34KB
MD5

70a31f884a75236173d1ed9650a97476
SHA1

7bc01da6f47ff1f6e5c73563bad5f3190c1310cf
SHA256

7d3c1739e8b9dc2855ec3319bd4477e559cdb0c0584beed2af94f82149752ef8
SHA512

526284e32a57551d5a424deddce4f0767a0f3b1a6a876be17047fc75cbbd4c81e15e0578a8940b93525ca1fa9e4d4af209418b3b517e7217b0887dd37098b520
SSDEEP

768:WfwelsOu5stvqNS+fK2zsyZ2ieYGFN1UxvjftDKD:XlMl+fK2zsyoxFNu1tDKD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1972	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1972	AcroRd32.exe
1972	AcroRd32.exe
1972	AcroRd32.exe
1972	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70a31f884a75236173d1ed9650a97476.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
08f74206b7988983fa72808b1f51b677

SHA1
3c50f6853c91824cb62e23a2346a27631803050b

SHA256
42796996ac204139a50560af84d4f4874a87d8e3690a30efd6cd7f4b118407b8

SHA512
8a154f20354a3bba427a108c202bafb3aef44d6f8209349609b6077becc77b36b909a906a6b77c669f46909d343ee47d775ea44307050c04c1cec4b652ff6cdc

Download Submit