231235a95edc8f69db96bdc729b166c3c7a88e3124471b15c54178a393a9a367 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:36

Sharing

Report Analysis Logs

General

Target

751c1cf9f829e698f56bfef68f7cfafd.pdf
Size

73KB
MD5

751c1cf9f829e698f56bfef68f7cfafd
SHA1

dae10f1380824f50106b7b4cc783759481851dae
SHA256

231235a95edc8f69db96bdc729b166c3c7a88e3124471b15c54178a393a9a367
SHA512

6b6ff60139898b8f995b6943f30ff0b079f94d5c9e9361dcf852330d72832d76eeae8d7a301484834715dc889ae3143556e67352752daf9f5341c21a508bb207
SSDEEP

1536:diahHwkC7WWdFf17k1iIluJqBt48Q49YGtW:rhHUdF17jIlFBBDY3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

624 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

624 AcroRd32.exe
624 AcroRd32.exe
624 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\751c1cf9f829e698f56bfef68f7cfafd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:624

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
d959fd6f22c402524790ca4751e23954

SHA1
36db8c6d299494a0a52b1c388d68b6f16c007fb6

SHA256
2b50e5f07645d62117303b3a46bcc0365b21601f924d885b2a2cc005ca004b7c

SHA512
11a636f73f700ba04b9a430c279dc1af18477041aa21363eeb18cd793980d7c80b851c72772f910bebfac5df8a5a6df81003131a1f31b9bb7b95f25bc6c8f0b4

Download Submit