501730048c688a9f3c4e007b2733996b07f608b2bc4ad0f2cef2a05643973dff | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 17:51

Sharing

Report Analysis Logs

General

Target

7523159d4dad0c0e0fcf9ae0a733e535.pdf
Size

34KB
MD5

7523159d4dad0c0e0fcf9ae0a733e535
SHA1

dc0a99947769c7559aabf1aa1f72fe598f5991eb
SHA256

501730048c688a9f3c4e007b2733996b07f608b2bc4ad0f2cef2a05643973dff
SHA512

e61281b7699da78330f266012bdf09c22bc57e0c502b39bcd64847636ead7c959e14f64c7baedd37f16d9d62cd3547e5b11ef4b49769339a4f5a5f511fe3272f
SSDEEP

768:UoFihusfDr96YtUscE0Y1GB65l8se+7qsr0P+slG:U4susV5V1+65lmCTrglG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7523159d4dad0c0e0fcf9ae0a733e535.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ba5701ad3d4713921be52a2adc4cae39

SHA1
07223f85c89c57883ad0954ea42de453bfd0f889

SHA256
7bd99531cfe95819da5d5fb1d9516502680a78aedf4082fc733e798bab2bddd2

SHA512
0566518b791e0b92f6925f8fece218d2632431cc143adbc52eee23a9df16bc1d8b759bd55a322f7d47759e9fdad791b1c2bee0b83fa098fa4dfed4c9bac448ef

Download Submit