ffee92a4539ec1473d6a2f1ce058828df66db767ea82af571924e1f8310951a1 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27/01/2024, 12:01

Sharing

Report Analysis Logs

General

Target

7a318d57d2d96f1aa90c067316f3fe2c.pdf
Size

34KB
MD5

7a318d57d2d96f1aa90c067316f3fe2c
SHA1

f9ece86605a97c6497c71f14b7728e8da8d8f355
SHA256

ffee92a4539ec1473d6a2f1ce058828df66db767ea82af571924e1f8310951a1
SHA512

eed9343402422c1948e39b258933fde6ec5a47e342b836d3406745d5dde95163873f8c58ce3401faa0c8b630890c4aaa03aa45cb5c5fd48755846a7ab739906c
SSDEEP

768:5BTkZbCffsPeNblLVFq3f92YCAZiWMGa1Sx:5NkZbCvLe2Y4FGa1Sx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1740	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1740	AcroRd32.exe
1740	AcroRd32.exe
1740	AcroRd32.exe
1740	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a318d57d2d96f1aa90c067316f3fe2c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
94a732348f068310508c06c3bfb749bb

SHA1
6530fbb8ec96fb34dfd2f1269dd434638a20ce8a

SHA256
0f4899facf4c6d551c0c8e3b6f8be391825c34ae873631007fa0fc43078022cd

SHA512
6368a12da0d6bfbb6e463b56ab5adb0b39daa4bc181b9596e7f983b0b829d8de1b2520da0c03115c7b57dcc8609a1d5bf20341df4cf10d66ba4e46cfc842490a

Download Submit