7f9c0fb94691a553de0dd731f581c4da828332badd2ab6e63b9f99e5ab5561e9 | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 09:56

Sharing

Report Analysis Logs

General

Target

71eccb3e4dc0e90197eb72c6ac70032b.pdf
Size

15KB
MD5

71eccb3e4dc0e90197eb72c6ac70032b
SHA1

eb527cda00e2180255f48f5c7c155e6b36f2671d
SHA256

7f9c0fb94691a553de0dd731f581c4da828332badd2ab6e63b9f99e5ab5561e9
SHA512

c8213afe3855d94ef443cb20ceccf72596a3a3752ed0fd618108f6cea0a972a6ec6c0cbddca1ab274cd58bb9f0da3679b8644090514b47d172da9144748e6e68
SSDEEP

384:qsFlS3K6XgKV7cAgdOpW+0blkJ5+4OfqWIUPr:agGzpDCGP+pIE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2968	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2968	AcroRd32.exe
2968	AcroRd32.exe
2968	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\71eccb3e4dc0e90197eb72c6ac70032b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2968

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
83d1c87507f8eb52abf727cd1d6a3c57

SHA1
0166de2659cd84cad4353c1ce52168f6f9a58571

SHA256
9ceab48d21c9755aa793f9af26b18de3e467b5bb33f8b931a307180569127ace

SHA512
e21a3ad68ca5c640568e020b22fbc136830f280e011d39b65714b4d7894c8090ac89eeb68d3b1d81e328d2c2ce77bf0554e30ea4a1797aa09de6c85720c3922a

Download Submit