8b9ea551d6a7751d90b7f62e440ab921c6a9173293a297cd24bce663cb06ffde | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7914dbfb6b0bc7c94f20a6f858654581.pdf
Size

98KB
MD5

7914dbfb6b0bc7c94f20a6f858654581
SHA1

497cd4f13a2aae8e0ea53904e2758db8cbe13fba
SHA256

8b9ea551d6a7751d90b7f62e440ab921c6a9173293a297cd24bce663cb06ffde
SHA512

d9603322bf2b21365e70b51a543520ecc1df1e0e4e1282f706da6fc52f26bf2e88dc6bcc271e721734371f32a1bf984af36af2ef9f36affa6777445124b292d2
SSDEEP

3072:1FiBsnxsYGK2eVJvxIHEhKOjv24qmOoy8+Rj:CBsxuWVVWkcC7qf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2616	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2616	AcroRd32.exe
2616	AcroRd32.exe
2616	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7914dbfb6b0bc7c94f20a6f858654581.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f02f665054a6ec2862f576145c5baa30

SHA1
f1414ae083774d0d225a8fc4cba5db26779fbfd9

SHA256
0ceb46368d9dbabafcdf830300f48fad6ad5c802b7c2fb97a9626829d2a51288

SHA512
0a2c47ba1f652f8926accfe5782b7c1c201be886fa5d737ef63c67ee9970365874e83317351b70de264b15f7da5bc0a4c996321a9ba0d624b937cea148416279

Download Submit