c6cbe065bf45558027bfc094d65e47afc277b701140cf94856fe02c5f91a2527 | Triage

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 01:24

Sharing

Report Analysis Logs

General

Target

78e945a56169a3026711a88141f54cd2.pdf
Size

98KB
MD5

78e945a56169a3026711a88141f54cd2
SHA1

b1739035886f7960960d6dfa68026f2b649b48a0
SHA256

c6cbe065bf45558027bfc094d65e47afc277b701140cf94856fe02c5f91a2527
SHA512

b69b8d48e3300acc7aabb2ec61492a50337f4afda320be3a07a27fb8e277628ac2c25330f37033f13fc8c34d6e49485b872eab8b51a19f962d13bd78ce914c40
SSDEEP

3072:D1+bvi88jp4wsIQQcfh2Jr2JsNt+73GvY:D1evo4UF8hq2JsG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1680	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1680	AcroRd32.exe
1680	AcroRd32.exe
1680	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\78e945a56169a3026711a88141f54cd2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9b5263ffd14910f664552300fb3c3f96

SHA1
4ef5c05aad35a59f93a24035d4de452ad6b21877

SHA256
2425d3ec255335ba1946eeca6082ab909f57640fbb8e911a27ce2a2cf5ee4e6f

SHA512
9a681996e576f0b9893437f18375f685d5d75945e29f58d9ac8f9704eb5e906b1e536d20d64d12eacc1951b288ad5e5ea66511d3bb912cf21a1adea3778cc894

Download Submit