13aca170b6ea3d56e89df03674779067f689a2420ac65c5fdfcfdcce0c406d3b | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24/01/2024, 12:17

Sharing

Report Analysis Logs

General

Target

7237d36eb7b85f80f463505dcce87d44.pdf
Size

101KB
MD5

7237d36eb7b85f80f463505dcce87d44
SHA1

b08185d50df68e9200560c001a59374ea420fce8
SHA256

13aca170b6ea3d56e89df03674779067f689a2420ac65c5fdfcfdcce0c406d3b
SHA512

cc0ccb00a57df485c08f796924ee09691a32e38eb37010ff255238368a9894d5104a8d460941c351cf44487fa9db601d343db494cf32efd1f4f3aaac8f9b5a29
SSDEEP

3072:7zwoU6kBX7xeji4+2K4DXzn4qRhPm50XfZIW+yT:Yoj2rx3CFXln

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2216	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2216	AcroRd32.exe
2216	AcroRd32.exe
2216	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7237d36eb7b85f80f463505dcce87d44.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
26d7d78e56249c1db544364462bd1b76

SHA1
d1cad41aedccadd389a912d7141d3a9265f9daa1

SHA256
05f1e9ec3c5b1d56055226e44f6698b30c63e1e186e30e246395dc9c20c199f4

SHA512
d4c3cf79038f3964f88fe11464eb3a32064c2cf18d94a66042f6027f0eca5b76d3656ff3268fad4e5a6e6bed29b52b0d35b2ef06c4ec6ffa45555e968187bb0f

Download Submit