bd9f63e2e0af5fdda421a5302adb826a069b588bddbc0c962af3ed3c63031643 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/01/2024, 10:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

772392cf3bd27a9956a50baa3db198e1.pdf
Size

96KB
MD5

772392cf3bd27a9956a50baa3db198e1
SHA1

c152c0993ce596ece728821ecf4655eb29252293
SHA256

bd9f63e2e0af5fdda421a5302adb826a069b588bddbc0c962af3ed3c63031643
SHA512

b0ff62469f8c52fbb7531a526b469569fc02ad54baec09e671fb082f6166fa8348a8612c7006ba491413869c10fa4e782a7a2226459436f65215a9048f4f1e55
SSDEEP

3072:a3XUMIWVGiLZN0+qdpvQtVo4bci5aUfo7k:aURiLZy/7vcVo4e0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2848	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2848	AcroRd32.exe
2848	AcroRd32.exe
2848	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\772392cf3bd27a9956a50baa3db198e1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1dd7529658e54f19b35dd08a7d3e0b5f

SHA1
58233160356f56d1f3ffdd13b7d8543aab8aa9d3

SHA256
2f5a9fa7f386d5f4c47f71828161d95eba20c6c2f2b873faffb32efdce595034

SHA512
f2d062ddf125afb43cd54830a20ba9348f8bdddab20db86110ea3a9af3bccce15bf85e3d3ffdf594e94159e31782d9feadcd41c88d21bcabce660a48a7226fbe

Download Submit