b9a139235ba4fd68d3240a7533a69f26db460d9e4c4fd5bf984a158ad01b8284 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 06:31

Sharing

Report Analysis Logs

General

Target

73f96372b1ae3683474f0b46b4c855db.pdf
Size

122KB
MD5

73f96372b1ae3683474f0b46b4c855db
SHA1

edc2880fc85571ecde9a86f4271612102e28587a
SHA256

b9a139235ba4fd68d3240a7533a69f26db460d9e4c4fd5bf984a158ad01b8284
SHA512

0da84e513567fd24dafd7217374b74e06fb7eea0e9bc46411a923031c0109cfc1869f663537f962ed83c0c81ced3072c6fe8968c8789b98e9635cc3a35a6a60d
SSDEEP

3072:2wUUiLRKeM8ILy72dmDfe7psZo8taGKOtQc1EPJ2RPD:2wmNKN41W7/8QDO3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1948	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1948	AcroRd32.exe
1948	AcroRd32.exe
1948	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\73f96372b1ae3683474f0b46b4c855db.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f20b5a13ca0446a5e721383caab58feb

SHA1
06c1bdc5ec9f416bac2b5f23b8c11fce27d8cc88

SHA256
7de81998e75111b4c4946f97148f24464d1341ba95398471f6efc92441e931ae

SHA512
a1e019956dac9285e242a57c071029a5ecb7c0963f112da8de2788dfc018da9fa6c114185d3af8088e67767261abadd574933caa504b85581e84d99006b1bbd3

Download Submit