acb5a55c1c53a11aafc6ea2cef09410a710c482d263c6b51ae8aae225f654d9b | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 11:58

Sharing

Report Analysis Logs

General

Target

722dfe0e04a6f176c6d342bc5ceb339e.pdf
Size

45KB
MD5

722dfe0e04a6f176c6d342bc5ceb339e
SHA1

54eddcc4d045c1599e13a05dadcb8a3e058f2570
SHA256

acb5a55c1c53a11aafc6ea2cef09410a710c482d263c6b51ae8aae225f654d9b
SHA512

685b5704df2888bb50c36e568b66eec27498f4f7dd445d6b99d1cad5050e952fb8aee26a47a001f186799501c7f1e84b3f57d34fecc0aeec8fcf021884c333fd
SSDEEP

768:psw+UJhZ39ayh646tDt8kAKDqrVm6uoTP8CvD9TV5:v+296tB8kFyvXb8CBTV5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2188	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2188	AcroRd32.exe
2188	AcroRd32.exe
2188	AcroRd32.exe
2188	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\722dfe0e04a6f176c6d342bc5ceb339e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c33e4fcddaf6260a7cef8224219228c1

SHA1
611ff898cf6870aa75559c944724a5e1b8cc1ca2

SHA256
b3905a700f7b253ed918ac5d8a0982622c4cd1375d9fcea300b7d75bcd01cb4f

SHA512
fb1e45e109e2d819f17b7ec8222afdf13dcfff592e136d51026e0259be7706355b3781ea1788d958b2a0893c816c5769efba0be5803f6f537414f0bc763d1757

Download Submit