b7ff859bd455cc8db7c101599c11cc8cfa52e3655af5715dbb7df1353e18bf57 | Triage

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 04:10

Sharing

Report Analysis Logs

General

Target

7168fedeb67e04dafc8d77e78cf42cdf.pdf
Size

34KB
MD5

7168fedeb67e04dafc8d77e78cf42cdf
SHA1

e64c2a399018bf7175ba73d2db46e8dfc2cfc6a6
SHA256

b7ff859bd455cc8db7c101599c11cc8cfa52e3655af5715dbb7df1353e18bf57
SHA512

8fee46f7449796b623eb0d4d957faa87dc6017a5067769af6ff860132f3e47399fc8e03da29bdcecac07e1e5413da507c6751d85400d7f35b758ea89cbd01f97
SSDEEP

768:zzVercDG8VZsSv8ajvISEhC6knJ/YINuzhxtLf3:f6cFjkeGhC62JVuzhjf3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7168fedeb67e04dafc8d77e78cf42cdf.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0fdaeabba0e7c2bff18b3f366dc035be

SHA1
2795e8d27d223cb8297773a832b9bfdcd0f8dd38

SHA256
37c29052ed8d943bfc67df990779a87abc95ce4e2ec848d2446f9edc733bdd12

SHA512
e04a8432aa327672c978d2ef21ae602b63e5cde6d604b7fa70076a6690c32a225e700981cdac0513731a64c2e7ba8b3ae9f00d53e3c9378a6fbef718f05e54bd

Download Submit