9bc1643165260ac077d93322d9d559c1fece4e53e15a1ca04b3b5809c7acbe4e | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 23:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

75d47219b2a38f74ae19438be8883bc5.pdf
Size

66KB
MD5

75d47219b2a38f74ae19438be8883bc5
SHA1

3d8e6564c114f532df6d46cbcb2a2a50904cd10b
SHA256

9bc1643165260ac077d93322d9d559c1fece4e53e15a1ca04b3b5809c7acbe4e
SHA512

49bd29b53665d3939d66e806ff7281d4e7ab50712bb2681f47920f25fd77faab9c90d15af75022641f2dcbbead37ab38ffe537f45c3c8aac58e2e02232183f36
SSDEEP

1536:3AItk4gf63Xou4dNxE+wx8O13yPFONRd/KoeFPRMP:9GKb4zxdwGO13ykFKoh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2364	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2364	AcroRd32.exe
2364	AcroRd32.exe
2364	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75d47219b2a38f74ae19438be8883bc5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
56e65224dea252c9897fe9fdd9ce8949

SHA1
b905e3f920cbf2c82a3eb443069071b6760584d9

SHA256
c351b6e8ff70c67c5bfe352fc957b27d4bd37b3c5c99dd5b48a4cfcc8aabdf19

SHA512
5960d1394accd486be16c1c4649d29ae1d2dcd24ca672de3e157fad5c24afd51fc2f2d48b1a3f01221d9daaa47d0deee7157fb00cc1c1d58a890ba3fbda6143a

Download Submit