8bedda2838dfe45a9e0de9b4018ecf9951a8f3379dbe592305b0a184febb5d95 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-01-2024 02:58

Sharing

Report Analysis Logs

General

Target

7143b8b18b31edecc837cebf1c8a0647.pdf
Size

34KB
MD5

7143b8b18b31edecc837cebf1c8a0647
SHA1

27d1f8481236bc092031036022e3b8a990b1501c
SHA256

8bedda2838dfe45a9e0de9b4018ecf9951a8f3379dbe592305b0a184febb5d95
SHA512

716102270a3839d57a85cad85202b7e3a0a765c66d963e5647937af99d0bd34b5da6711a88c72ee3059089c4494ed2bea6c04c17228f31c9d90493ee7caf78d1
SSDEEP

768:oyixTsXud7OqoA+5DteyDS3hkEa0/cyax6cllFh+ghc2mkL:1iQLvIucaLxfmkL

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2148	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2148	AcroRd32.exe
2148	AcroRd32.exe
2148	AcroRd32.exe
2148	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7143b8b18b31edecc837cebf1c8a0647.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
021316b1aa75a8e103948111cc617b1e

SHA1
70f30714a19962905dc7cc6c365dfc9408fab471

SHA256
1249c1476adc6c7be1240fabd8a056ca7463c813b809acbcfd5d782d4e68c013

SHA512
85d560499bb55811effae1ca2cd7a1d2b66d3c604c35bb3e64de45a32ba6d7a8678195cb13f000641b3ec89df6c8709b8eb94925e4f5cb5c7278d835d1be3852

Download Submit