bc0714a73590945af898a04dcbdb2969570a09d4c912e6cb6d9633146e97c8a2 | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 02:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

738e7034b6cf14825549b11781373283.pdf
Size

33KB
MD5

738e7034b6cf14825549b11781373283
SHA1

096d9d31f512df749135bdd1b17142c18799a590
SHA256

bc0714a73590945af898a04dcbdb2969570a09d4c912e6cb6d9633146e97c8a2
SHA512

d6a3eca92cd835bb07b268c4329f6404be90a8b86091a786004a499fa4e6b21590fda7d06ec7be7679462e9be9084b6c3d826f19e2a6d9de51565f5ecbe5f076
SSDEEP

768:kY6hIMh5sSGlI8Wt+3hyaa2hpFe83L+faJdEaah:X6uMhwI8WtepFe83RHah

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1748	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1748	AcroRd32.exe
1748	AcroRd32.exe
1748	AcroRd32.exe
1748	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\738e7034b6cf14825549b11781373283.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
421cc2d3debb4467d9487a3e0d30fb73

SHA1
1308a6450028215ef9808c13d063bd1fdb77d14d

SHA256
45c16555bd14613301784141054d54e747704deb02eb70ac5172c13d4c8ae0a0

SHA512
b3742b58ea12f07d418b492316f7ba6a734a2ef420dc340d4f7e68d93822e83f9e2e2e1c8266aaa31d107d4cedee6f0381aeda1efe395dfd078a088885421b23

Download Submit