78c6125d9a88883e9bef4fa204f10f955217120ae5a0e8b9860dc5bc1f0bab7b | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 23:45

Sharing

Report Analysis Logs

General

Target

78b52e594b05b61c60b87052d1a5f3c6.pdf
Size

102KB
MD5

78b52e594b05b61c60b87052d1a5f3c6
SHA1

0593bcb2774f850e40febfbf882777ec941b0718
SHA256

78c6125d9a88883e9bef4fa204f10f955217120ae5a0e8b9860dc5bc1f0bab7b
SHA512

8fe09d813d7e2c8f8fb64f6f4c737bbf26ede3d987036e84e7bda881accb50e3ff15c54efeca740ee62b51dc142a85a773a88ef83e9d32c9d2df874863403a28
SSDEEP

3072:iioAvhV5JvlkVQYFEohvl8KGn0FuEtkAy:iihhbtlaQ2EoTSn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1268	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1268	AcroRd32.exe
1268	AcroRd32.exe
1268	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78b52e594b05b61c60b87052d1a5f3c6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
767b8195b87920deda73dfaea86cfb5d

SHA1
77cbb740038e0e2b72b68b05a2eebaac286b3ae8

SHA256
6db321a75d95323a8c583ae3362f217ece264e015dfa451169c783ec6c4b271d

SHA512
c8112006c456be396dae82591950348f1ad416196607cceeefa244ec9dd3a5a01dfffa2555d0a5e1952fce4412909c6ea76eeca83268c0538d144ccec28df826

Download Submit