f782fab6a314d977182c0457c69dabb8d9f6d9be195f8f9b0b29210ce3cfb93b | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:20

Sharing

Report Analysis Logs

General

Target

74f443a2795140899f5b6385d54c6ec4.pdf
Size

35KB
MD5

74f443a2795140899f5b6385d54c6ec4
SHA1

e08440636ffe9d47c2cbe14f6e82fcd9fee486de
SHA256

f782fab6a314d977182c0457c69dabb8d9f6d9be195f8f9b0b29210ce3cfb93b
SHA512

f54468dd81c9c7f55cf33f0768b805802d6756a2c4fa1b933fdde9fa10e4502f13856816c1315349765b8a9518780c824d41ade769366161a04320441b5ec44d
SSDEEP

768:VvXLUmjOI+sR8Re0j4qIXKjwTnnsTH9U5Skgsr3:VvLUmX/11nMThsr3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2292 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2292 AcroRd32.exe
2292 AcroRd32.exe
2292 AcroRd32.exe
2292 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f443a2795140899f5b6385d54c6ec4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2292

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
a9f04f3abe7784e76de56de7b5c141e5

SHA1
f42a8002271ef109657785e8c477e5590b3fed72

SHA256
1a5611a44d27ca08e7ee7851bd1190f638982ee13583f62217a038d5ad5fcd7d

SHA512
76f47e9d10cbd2fab0cff45adf1fc21d0f418e16b92cf2b238d24fde9f307675d4fc666a3be0e263ecb6bf7229651159a48f610a2d72d8195121173d728d67dd

Download Submit