65f78683e9be4f6c4134a16eb97150d35662e6c1cbd4ace96b26fc91d7fa7187 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:33

Sharing

Report Analysis Logs

General

Target

751b0adb676cd29445c26e45b7fb1c6e.pdf
Size

34KB
MD5

751b0adb676cd29445c26e45b7fb1c6e
SHA1

30c6ecb29c38d4ee0e6f0a9a0f4c6adad98b8d97
SHA256

65f78683e9be4f6c4134a16eb97150d35662e6c1cbd4ace96b26fc91d7fa7187
SHA512

9c5c624d5a36256303ca595fd50ad365190c8b635bf0aeb71a28b518347994e6352c689f3988d617f7eb09f03f5a2e5d25206dbbe3f5a553df2e17dd6aa71f44
SSDEEP

768:D37VxEHmvXOLiXjnCpR4K5uzOUfHEDz0xN:EHFLGCX4K5GOUfHEDz0j

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe
1628 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\751b0adb676cd29445c26e45b7fb1c6e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1628

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
0c88b13e4e030e7445cd9320d34dc9bd

SHA1
b9de92b937afc50133d482c9c9bf46867f70b823

SHA256
dccf33f8d3e535d1e0987e97691239492645e32eed63dfdb859f5cb450020b03

SHA512
98e788af5682f2e12a6d7b4a792cf1f137c6c556998a03c7fb48627c943407ea9be06b54495697358197bfaa19819759845bb06f5267467c2b693dcfd3c43782

Download Submit