02ad0b6b98e25354de234557f05f93feb9d936cc509746d9463a7c5d93ece5c3 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 08:49

Sharing

Report Analysis Logs

General

Target

76ea07530f8b9b7a8214364c5aa91295.pdf
Size

99KB
MD5

76ea07530f8b9b7a8214364c5aa91295
SHA1

c054a0f33e74700ef19619e82a9bab261b1bf2e1
SHA256

02ad0b6b98e25354de234557f05f93feb9d936cc509746d9463a7c5d93ece5c3
SHA512

3c375919a9dc2adf6627f36944148565fc386bbebb43be4b74f556948e63587509a2cd837cdac99cceccbfa1c53a489011f47c6c0795980460cd724d2a53dcbb
SSDEEP

3072:YbHoISRec9HgWjpY6nNOcu1NPolB7KOYq39w/:Y5SAIHpprnNVhB7KyK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2232	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\76ea07530f8b9b7a8214364c5aa91295.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6dc13ca1752db95d25e8546707e2749e

SHA1
89d15e208d9369e1bfc65454b74b061a0cf1d4cd

SHA256
5b560d6ea94e73cf9caf2af4688e3a5cbe9f66564114ab2a7deb420f365357c5

SHA512
3ad91785923042187cdfe10782afb4548e9882982e4194784336e5713c1b87ac0505d03b99d2b6555f0e72a21929965b48ddab724de1d55137a997adc33943f1

Download Submit