3daf71b3121ecc666801a8b697f5c8c510f63cd977f194b8c975f87635baf6fa | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:45

Sharing

Report Analysis Logs

General

Target

7520724f58519f091162da01899a7c6e.pdf
Size

97KB
MD5

7520724f58519f091162da01899a7c6e
SHA1

6b3e16058e1a81713e5266c5c8bd0ebd0aa0b1d3
SHA256

3daf71b3121ecc666801a8b697f5c8c510f63cd977f194b8c975f87635baf6fa
SHA512

a678dc717852607c72b657666751c15814db95c5e49293b96c6c85a32257c6749aac9b7881a6373eaeb643a6f38b188e1ee07e544b2fdae90ec161a0a9039d49
SSDEEP

3072:Bto2567braFY9vGz/Tt/R5POOM6Gly0al/aq:3JQ7bra29vGz97mi1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1924 AcroRd32.exe
1924 AcroRd32.exe
1924 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7520724f58519f091162da01899a7c6e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c5621148c7bda6d450bd90265157155d

SHA1
c72487afc2cfdb9258c440d76eae72811fd85d46

SHA256
6d2fbb4f19f348afec36615962036315aee1a1a533599ac3dfd265d7917bc9e0

SHA512
7b24a507959f5bccb4acd2a68d46bfc6784f015f2056a9a9774cd640df41741dd30d984b4789a35616275f766afac77436c39523cb8ba5581717b1e5041c2938

Download Submit