0822b1ee39867cd2490e6965719848a768851823fe9fedebcff75758a2c033fa | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:53

Sharing

Report Analysis Logs

General

Target

750467e00fe48fd1b575c2943169dc77.pdf
Size

37KB
MD5

750467e00fe48fd1b575c2943169dc77
SHA1

a6ad635ce998cab058fe7f02262a91ba216597c8
SHA256

0822b1ee39867cd2490e6965719848a768851823fe9fedebcff75758a2c033fa
SHA512

f53428f6d31450b0398b9fd06edba24430c4399fc31ae4e0c4233853d85000e0d2774fb8163677bf6b78657614fe526fc8f474e2bbe62284d2c7e49f0ab4da56
SSDEEP

768:Ail0cGIkism8YkIWP7UhBl/NpQ+uNYvbK4lmvb8LAF:AiKRIko/BFLENE5cvbfF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1320 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

1320 AcroRd32.exe
1320 AcroRd32.exe
1320 AcroRd32.exe
1320 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\750467e00fe48fd1b575c2943169dc77.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1320

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
c4028c57cfdb8cc2942501fb1edb674c

SHA1
9058f72f433b56dabc8e629ff245a6c88b63d991

SHA256
7bb4646d905610672beff9b49dc2e03331d853922e38682ca29bd35bd82e8aed

SHA512
be61a19609d7081a480e0099dd73dcda1f8c713ef3237d745f2373398dd6bde327de56a1257e810e0a6b764e9a81a8a7e540c96a15c5f7db711c8f6eaf51b9a8

Download Submit