9a6c1f0c926f91bf27bdce122097a732568a267d351a41f41648f87706d17a7b | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 10:46

Sharing

Report Analysis Logs

General

Target

7206b58ad02c05a41a0afc7c83401501.pdf
Size

98KB
MD5

7206b58ad02c05a41a0afc7c83401501
SHA1

658ae9b094d5f8d18709ad5caac11f0a73575ae2
SHA256

9a6c1f0c926f91bf27bdce122097a732568a267d351a41f41648f87706d17a7b
SHA512

8e842f4c02924344187056b6cd1c13cb6c7322a74652dbd6831c4d19d1372c0f278caf0e1c078ccccff33d2678f166c8f92d22354649552114a85c254c52db58
SSDEEP

3072:eoW+GqX540f/SEb23tenRyitsuXrRjGCR:eoW+NX5bf/wtiDb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2360	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2360	AcroRd32.exe
2360	AcroRd32.exe
2360	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7206b58ad02c05a41a0afc7c83401501.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b737b865ac0a367d335f86c05872cafe

SHA1
80af89ee9bee65f1b8e954d2de0a06e6b028fe07

SHA256
9dbfdc249aaaf11f2c1db32cf4604e3fb20a51d9d1607bb98c8ea27c5c3fedbb

SHA512
845da565a5a4a7cee4cad6ab5f418b5e4fde4fa7f372629aa84fdb2ab47c98922d8fb43e2c41f16b6b98a4483df6535004ff863c251054ee7ec3904ea2ca62f4

Download Submit