a4d30a691a25424d36f706d05816c90f81b5152e8dcc08a1bffd3aa9685df53a | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 17:20

Sharing

Report Analysis Logs

General

Target

7513bae2b57b6008bed0593e3c4e5978.pdf
Size

101KB
MD5

7513bae2b57b6008bed0593e3c4e5978
SHA1

31d8b059a85b5a2be98a603faba1597f5aa55f46
SHA256

a4d30a691a25424d36f706d05816c90f81b5152e8dcc08a1bffd3aa9685df53a
SHA512

a2256136185b767ca959c200dedab10e840566d56d6ebdad80cc98cb32375cc75fc977ec617aa9703ed203708e8123b1b05be2a69ef5acb7650a4903e4550a4a
SSDEEP

3072:zm/gZkUooK4PHRmCrUyROpqAdTu7+XoVWwsyj:z2+e4PkCcXgWw

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2056	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2056	AcroRd32.exe
2056	AcroRd32.exe
2056	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7513bae2b57b6008bed0593e3c4e5978.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3774736eb1f18cf505c74cf603ca3da3

SHA1
213a1152e1d9d0384e27eb526baec7dff8f3a2af

SHA256
f9230ebf7687b158062e2f6664e2ec1a80ef8c0626ebf6357455cb21605b227d

SHA512
ac0caa81920b713b83b108dafc4959aa7379d2014bff91d17e3e8943917035b88379804e7ca5c35306bb47ca623667823460442262ee060b1836d6b4ce3f7627

Download Submit