f81aa2c56595b501825c04c717e0171c9dbd59e0b0907f299a71e23c83ad75ff | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26-01-2024 18:36

Sharing

Report Analysis Logs

General

Target

7816673a1d313255bc7b51a1b74e3286.pdf
Size

34KB
MD5

7816673a1d313255bc7b51a1b74e3286
SHA1

b0432b5caa04ca3186c554a217dd061862ae628d
SHA256

f81aa2c56595b501825c04c717e0171c9dbd59e0b0907f299a71e23c83ad75ff
SHA512

c6adc5b823dad2c1b0a8c3ab3a51ae14126dcfab991310ac4eed2d79b89e731d271ed85712eae82ed3b71d32c1a820869154f48355cb0d67c607c30abf0ad488
SSDEEP

768:uI8yOTEuhZTrs+aokXKqDu6nHaUgeZohGOL4RTq7da:kyyBZTIgX6n6peZ+G7yda

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2392	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7816673a1d313255bc7b51a1b74e3286.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a13e0207a68e5b5f5589a69df0607723

SHA1
cd84e64973c622168eb2054371fda43ae6fde155

SHA256
bd0482f58f7609de132f6e6d051f83460945ec172539f4ec8b037e69121d54a1

SHA512
5b799274c4630307a7d6a849f3d40f535298a1493ff37ca90582ce8df39f8f218489065396ac34f0537dca2d19d6e2d92b99329ee7bd7a2afecb313412a03fed

Download Submit