9af20285e4ec04b15023c70e3d519e48ede6f572996a4a3f183e848f3837d408 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 06:48

Sharing

Report Analysis Logs

General

Target

76ac0daf6c838ec255789761809e9414.pdf
Size

109KB
MD5

76ac0daf6c838ec255789761809e9414
SHA1

d00a0967ea5b953bc4fca7d70e7d35791efef15a
SHA256

9af20285e4ec04b15023c70e3d519e48ede6f572996a4a3f183e848f3837d408
SHA512

8f7107f477a76675ce513d2e357600e5369387909f9520faf556dc63c4de8da681f79d150bbcf8e753e25701ba4c0d585f056120041b99016f0b049991573e1b
SSDEEP

3072:c5U8EifBf3Y9mIqwm13GyuKZHKbZKDZPQcWS:c5U8he4wGZqbAQ8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1796	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1796	AcroRd32.exe
1796	AcroRd32.exe
1796	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76ac0daf6c838ec255789761809e9414.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1796

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3131c8cc5164d63fcce09b5c4deb09d0

SHA1
645ebb01c8ca3649ced68636bbe019ebd1a6b154

SHA256
43c57e5ad191c191227c851e036d781e99bf721573bb11cf4edde4e97e58c410

SHA512
c329380584bb03b1150c55315ec05346f891d613cdff7dd7e8f856b6fdbc6dc8fa8ebf04443d99e145c15d272ebbe8ca30efb5f011b6b4265444212144a399ed

Download Submit