d7d97b7b188231a16cb2ed0b77dac84e7e83354a21fc2d7166a85bf36b8f148c | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:21

Sharing

Report Analysis Logs

General

Target

74f4dbb2d167d50f53d5a6c7ee3ac214.pdf
Size

106KB
MD5

74f4dbb2d167d50f53d5a6c7ee3ac214
SHA1

e4efbba77398e744cd1d1d6995d74525763280ec
SHA256

d7d97b7b188231a16cb2ed0b77dac84e7e83354a21fc2d7166a85bf36b8f148c
SHA512

fa83057e92fe521f5e3fe7e3954bcc64957d859225ececb0e27a169dcae2e0f6bf5863385935a095809085ee36ee4c7b45c5a98d75ad4c100f0c3bc75f96f1d4
SSDEEP

3072:BbHr5tdRqmVhAk+xnWLeEfCErWJsTPiFl7JW8nFT:RTpYxWLHfCEqGmFlz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2472 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2472 AcroRd32.exe
2472 AcroRd32.exe
2472 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f4dbb2d167d50f53d5a6c7ee3ac214.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2472

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
45cfca5cdf20eea4b2ada521ba8be739

SHA1
6e950c6723f712243528a745d81ec1d4f1a0f819

SHA256
35713218c3eba925a0e23129413825b8bc855dfc5c93e0ba95b5e267091e4152

SHA512
1610fc3c27cffc9f287ded9faff5ca0591504e1d4b4516136756e13b6e57f5f4d82f37bdf2a5855066fc6e616e9f136c4ba1adf124bb3844ddcb8a2d220aa73a

Download Submit