8b5d826c0bc2e29e903405ffc3b8ad294cb2f6e6bab0b0eb2b747ffac7becd7c | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 23:46

Sharing

Report Analysis Logs

General

Target

75d2b4d70769fb826fe68cd9a46a32be.pdf
Size

35KB
MD5

75d2b4d70769fb826fe68cd9a46a32be
SHA1

13abea211504bddfe2d4aaa478f33713cce3cc82
SHA256

8b5d826c0bc2e29e903405ffc3b8ad294cb2f6e6bab0b0eb2b747ffac7becd7c
SHA512

2e291ac46d78370d0d3e7866c5b107f80dba22c0c1842e91857b1b34d54715b2762c6e339b7e4381cd0eef4cddc46c778d5a2f2cb60cb7276a044d8d1426ecf0
SSDEEP

768:fca8vThGj1GsvDGgYN0G3a/79oQL2JDoi6kBn1:fhZ8gGIPK6En1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3068	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3068	AcroRd32.exe
3068	AcroRd32.exe
3068	AcroRd32.exe
3068	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75d2b4d70769fb826fe68cd9a46a32be.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
99dc18f4791c311cde536ca4a6321e22

SHA1
7b39908c3bb125600519216a7aa3519730406d99

SHA256
da6f2ec3b9a10cf4b1bdf3e6e13a6a01ae624c014a8143fc8bbdc97e0d540f8a

SHA512
61955507718a6de630c24f97f60ce323ecc6980c0ca925f655307a31df4fae9c900d6b3f44ec18b9d5ee1347c1a13dfa84e9888104b4b2ec342db196a8a984da

Download Submit