72cb197ca66abb192f41be0981336897df9fca4e308ed1de941921fd551de6be | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 16:24

Sharing

Report Analysis Logs

General

Target

7ab6ec2d5c3a6eec4a61b50a4d7b3a9c.pdf
Size

75KB
MD5

7ab6ec2d5c3a6eec4a61b50a4d7b3a9c
SHA1

cf81af31fcf6039cf54b69a522bb351bb25e08f4
SHA256

72cb197ca66abb192f41be0981336897df9fca4e308ed1de941921fd551de6be
SHA512

ac5f802e55e2e96873b538e70b7d4dc71f43fc579a995190447d0c7a3b8a02b581e6a99fd9fc9d2fc0fbbb27b71cf90350ad0fada66d10dba19ae18cc8784011
SSDEEP

1536:S9EJY4goyKU/M6/Sf4RYBsIkQ6y7AC9+YeB5/Xzqb:swxyK6af4jIkQ6S+YePXu

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1340	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1340	AcroRd32.exe
1340	AcroRd32.exe
1340	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ab6ec2d5c3a6eec4a61b50a4d7b3a9c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ddacf9123eef9779e10612418a6c18c0

SHA1
249e9a7d07eabee6c12f693accb27b18ef52be8c

SHA256
bd182e1fb0b902389f7044ee64a1b1fdab0e480f43d840ce283e6dc707bb014a

SHA512
f2ac06d2e72a1c42dad61337649ae6976995bac00766c1574d428fda6a193b85e8ddbaf8b9154b192ff03247cc155ce7e3ef397c5e77e3e8166b535acb5b6356

Download Submit