5bc8cd8f4c8b8f31b74b49fb6115c332d9028947a4b2ca006f49bb20e9cf63d3 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-01-2024 15:46

Sharing

Report Analysis Logs

General

Target

tmp.pdf
Size

57KB
MD5

cefaad5705d4acf62be6974cb6fbebb1
SHA1

6516d270892325e00575f498b1c98c16336d459c
SHA256

5bc8cd8f4c8b8f31b74b49fb6115c332d9028947a4b2ca006f49bb20e9cf63d3
SHA512

a97cd1a82a23d5d33a968652680fb7911e1c9d5ee7da3769e1b41426c335b216078cf2c7014ff294eac6cf4a04dfc22410b615bc2aa5988ff8dea49e59427e4c
SSDEEP

1536:GYcD9cCcTvadxUndtnb6T5HDfnjEEv9obmNaLnDninOkz:4DeCciUdtb6hbjEQ98msLT1m

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2220	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2220	AcroRd32.exe
2220	AcroRd32.exe
2220	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\tmp.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
09ce5a635699b95ad440f42fc69380c4

SHA1
bd18bc469305c8b043f53a9e2dd4f5d54f420f37

SHA256
d24d72406114b602c0f12ee7cfab7c4051d848519996b9e3b52880851d64454b

SHA512
de515d81d195f32a3fdb84eb134118c1ab80ffeb7e75bcf93aff095e8bcf621db8ffa03a905c5eace0d8d64f23c0614fe6c0f68be90cb87727421f52aaec28f6

Download Submit