821d4c9728f0c8cfe2e30f7c9ef68511a5670336a7039a3b9ad81718777b2c31 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7236897c9029f0e790f79c589545240d.pdf
Size

34KB
MD5

7236897c9029f0e790f79c589545240d
SHA1

7fe2ccaa8565c10dae5b7d685221ab933341a3f8
SHA256

821d4c9728f0c8cfe2e30f7c9ef68511a5670336a7039a3b9ad81718777b2c31
SHA512

2d827990a44b66b5a23323f9a30e6dd3a1da5e90b0251d1abd4937bfdf11944485fadf8f469e43e4ddf8def27aa37767a3a24687d28424cc52d1fd751c5d6089
SSDEEP

768:ugJY/MMqZsngOp8otgpjbuA2oYHz+iYrdC/N:Ve/OHMBiyA2/N

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2192	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2192	AcroRd32.exe
2192	AcroRd32.exe
2192	AcroRd32.exe
2192	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7236897c9029f0e790f79c589545240d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
32bfbe5121e3361ba874b1c9c67098a2

SHA1
12dbb1d1071da4593da8501dc6d4e1095fa340a7

SHA256
375dc59ced2aa4b9749b47fe5d8c57bfc1849904decb37e3d88402d3c3fd0fee

SHA512
9503def9649b60cac75110ceebef0ce5865af73ff95c72c1a57c7cad9650548a7c09becc8c78ac69c9f8d8194cd43820ea22d04c89dc56b32dfb9819a7e6b450

Download Submit