19a0f135061137ded3a9d1f409643fa0932f2798fef060bbed2fd872a107086b | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 22:14

Sharing

Report Analysis Logs

General

Target

7e249f64ef7bd418fb71accc181a0f5a.pdf
Size

34KB
MD5

7e249f64ef7bd418fb71accc181a0f5a
SHA1

6c4decc515d98c7482874ad06ca03039bac72eac
SHA256

19a0f135061137ded3a9d1f409643fa0932f2798fef060bbed2fd872a107086b
SHA512

29a31fc268fac0377cb9943172220aa4337a4653b8eec89ad48e7133b9446a34fb81fdacf7bf4e92bbeb9d5e109391aeb003faec5713795af1ae1fbd11e8220e
SSDEEP

768:83yp3x3/RJJTludZBJR+TTC36aLFGoxRBE:wgB31lfC365oxRBE

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2908	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e249f64ef7bd418fb71accc181a0f5a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a777b32fc472c7e3fd4bd046bf36c407

SHA1
ab867b2016ac62893926407ce02dd36b119d5b1d

SHA256
7438680a6ef76abe6555506ee2ba2ff04e2ca46efcdd9d1498a72b5f58263d3e

SHA512
0adca5c165e6e1ef6bc41a8ec2c2e2bc209bc1e7290ef0e896cee0221a04147b1d7ec9c79c4b687ed95b4a605ab4629c2dffbbb62dd1d85c0535c2562c17200c

Download Submit