74f8bfee97712239b3143fd001a8a2284b39bc7f5401134c69cbf4b16a57fb89 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:15

Sharing

Report Analysis Logs

General

Target

751126fba43459a2fe84e7283bdd64ca.pdf
Size

118KB
MD5

751126fba43459a2fe84e7283bdd64ca
SHA1

a53e502d318b954db6831e162c1a9ddc8aaf9500
SHA256

74f8bfee97712239b3143fd001a8a2284b39bc7f5401134c69cbf4b16a57fb89
SHA512

147d34d79ed48c2c243c52c5eaa24f9b18fcf4e59cf81c5196a77266e0c45983a7ba18b69f12a3f19ef8e79044729170128bba7b3976ae2ab365e8b0d209e285
SSDEEP

3072:51lejZGzfrRi/TPRnUtUxJEWa1GuDONSbeW:N8szf4TNU6JFk

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2548 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2548 AcroRd32.exe
2548 AcroRd32.exe
2548 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\751126fba43459a2fe84e7283bdd64ca.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
9ca0e8cc179ee2f9ce4b90b947be0633

SHA1
ce1ccb3c4dfbdd619e54e8518e82d88b771f48de

SHA256
c36843e84e0afd4e4a88b63421fc6f6d1244e428e4cbf69131acae431511aaea

SHA512
58dbf1bd1c390e29669b2cf289700034c40c5e402e608601a2bb10bd003338f66ac0597eb46e2d363ae29718223e6bf5d41f5c0e6efa1f4799996a280f7d239d

Download Submit