45043f71d8dd0f5c6956034bb30df81e950f18312edde4fdc9dcba63d868e324 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23/01/2024, 19:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

706b21f24730c1d1515840747786e07f.pdf
Size

35KB
MD5

706b21f24730c1d1515840747786e07f
SHA1

1b6d1fdaf83e4cba27b5294e140363de0e9fc176
SHA256

45043f71d8dd0f5c6956034bb30df81e950f18312edde4fdc9dcba63d868e324
SHA512

3b23e2d3e998871fc065b5d3237ef47c9d8cdf0803d00d31472432b66b53cd373d0aa0b4c839c23d7c230c07a7cdbe192ef9270b42bfe400ce1cb589cf80cb86
SSDEEP

768:E+yBoh0ZhRIslicWJDoWSgezlTZZELn4Ny/hH6l/:ibPRnfWJDCgez5Cn46hH6l/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2128	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe
2128	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\706b21f24730c1d1515840747786e07f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
208b36b0c7604b00a9ddf78dbb901ab9

SHA1
fcb41d69da882b52f33c5835a0aebce4052e286e

SHA256
7f78e2b9268f5e702feb6ae2747b4ad0974c283cb8762b64b730c00a498df28a

SHA512
a0bcd944a3ee1d63d213396007513663fbf5961b666116dbc1a1520e0f851cf6ea45751ed2690f923be5a2bb46fb4b120959515d5677690779a8328754cafdf9

Download Submit