853721b72d90d0f4554891abad9dd7182e7d403322d4f9b88da3bdc0ce3e0a24 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23-01-2024 23:09

Sharing

Report Analysis Logs

General

Target

70cda1c58c56b16225c7b12d4365754d.pdf
Size

103KB
MD5

70cda1c58c56b16225c7b12d4365754d
SHA1

1d550079be42926d69ff763b250fc890f33d7d2c
SHA256

853721b72d90d0f4554891abad9dd7182e7d403322d4f9b88da3bdc0ce3e0a24
SHA512

854c56afa8447bdca4e310000ed01863362dd1d4096d5102f19420510e804a3cf00b3f5f410c007cb00a4758a76aecd23a85e0a24718e8414285cd22262389eb
SSDEEP

3072:l5UbgD5aq4RLlehxbq5RtVh4dQWo23YB9wr1jN:0bQ5aq4Vcb0RtVh4Jp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1680	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1680	AcroRd32.exe
1680	AcroRd32.exe
1680	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\70cda1c58c56b16225c7b12d4365754d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6bbc7b44a4101e0eab56a87b140203a5

SHA1
b5dda3b5093b19d1e8b0e29bce879306cfd70942

SHA256
42d2b7177847bec65c43275b18a3391a54443cbef987d44d91c8c4107f0b0157

SHA512
bd4f0530f1246cd43a5dc7a1b39d80ebd813c75ae59114302a5acd6dbb56a61441a729f1ea3b597093182c80d295180e4f87128b37c5690f368862f5bca5e44e

Download Submit