373ed98b800477e91e3116bbaac9b1295f4e562693d695f00c090c1f67fb5bde | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
23-01-2024 20:02

Sharing

Report Analysis Logs

General

Target

707059448bfb3476f61fa503d9b411f5.pdf
Size

14KB
MD5

707059448bfb3476f61fa503d9b411f5
SHA1

45fd85cd25bc1ce1384b7ed79d4b6eac0d9aa256
SHA256

373ed98b800477e91e3116bbaac9b1295f4e562693d695f00c090c1f67fb5bde
SHA512

abcc6e162b0d5e5905c15e88d9f7ec80dee1c06ecda39fb242c3ec81e2884155fbf3069a2dad0235a29b0b901294fc43052c4494be6d7b10047d2eb54cdbc526
SSDEEP

384:g5YPk2Qlg8hH3XaKObLef1O5rzB76kthzV:g68plZd3Kx6fwZzBtt9V

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2480	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2480	AcroRd32.exe
2480	AcroRd32.exe
2480	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\707059448bfb3476f61fa503d9b411f5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
647500a8f86eb1f682bd810b042e1f05

SHA1
6f5135d377205bf479dda07b98504df97a78f6ed

SHA256
cd2f09f3bacbcdd9dc3a9e4f3f69f44062439be121991a1860423142af611d47

SHA512
505c94fbe9c88d366cdc04f88bab934ea188a522a5c39f3d99018192fbea4e6edc8383d04a9885fc08f42d158f5408817aab41b8568ee2f0e37143e13b689119

Download Submit