fd3553fb4ed32ed55728d98f5fa6824e1cacc7366e05cae7f7a88940e62b746d | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:42

Sharing

Report Analysis Logs

General

Target

74ff5ae649e0bf5628a31ec3f4b8fcaa.pdf
Size

197KB
MD5

74ff5ae649e0bf5628a31ec3f4b8fcaa
SHA1

5f9f0a4f7997d3e7ef20773796483ab40b3e9ccd
SHA256

fd3553fb4ed32ed55728d98f5fa6824e1cacc7366e05cae7f7a88940e62b746d
SHA512

dd72f07b61b6b143c4541e289e1223a9d572052ffa701c77bc338752efaf5bfb20a80699a0f0a63a6944688fc30c1b40b8a387a542afdee2f427136d83f4d6b7
SSDEEP

6144:beii8yGjk0sAipCGudoN48rfLl9Gjyd4dU:bPgGQnADGrTqu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2476 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2476 AcroRd32.exe
2476 AcroRd32.exe
2476 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74ff5ae649e0bf5628a31ec3f4b8fcaa.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2476

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
44e2ace52406653b123485224c4f9e5f

SHA1
969102405560e8012fc82bc5b62ff7b91772d978

SHA256
b9ef93b3363d33a89d8fa8b6e386def5d10e9b41fd3b308ff21fcde4fbe99501

SHA512
d6e1eb0606920cc556b49cf0d816a5b142b4dd5777296f11a111e36bd9b9675bca6882c8cbf917507b0be93913093a9e91f7b7ef8a8592ae0c9af34af4a54e5c

Download Submit