0bdbe29be3f73732306223eff950ec41d1347efb426c49b143a2e2fdc5e3f08a | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 13:30

Sharing

Report Analysis Logs

General

Target

74d0bf58a46979444984e243bfbfb17c.pdf
Size

96KB
MD5

74d0bf58a46979444984e243bfbfb17c
SHA1

82f066f9d9cd11c7a3caa9fe2ddb0b99ecbff0fa
SHA256

0bdbe29be3f73732306223eff950ec41d1347efb426c49b143a2e2fdc5e3f08a
SHA512

b4821fe12e7399f71ab4aa5296c817e79b51ba1187bf3f08bf178d6aa2b309a97dbf4dd514c5728ea04a422759cb7e1b1bb0903a1b026c8a2191ae6604fd69d2
SSDEEP

3072:o03KZLKQPmPGYIX7QHXxMr/W1lDU6LUlRI:o03KxKQPmeYIXEHCxwUl2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1768	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1768	AcroRd32.exe
1768	AcroRd32.exe
1768	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74d0bf58a46979444984e243bfbfb17c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
8914996228ce2bea299b1940110bae6e

SHA1
08530930a4487a33b81b7e25db6834c22f203e41

SHA256
7772356f91d4801e30e7ebd6d9f8615aa3516bbe65b47e2c0730e60f744af369

SHA512
0b7bbedabc5526c4d6267ce3fba43dbef0fccaf270bf54a74cee99e919cc3497ab81b61a13bf7bcabc0d1a4adc615fc95a25577d2f9d1748a46ab22ffd8c242d

Download Submit