05c1c9253ea8b7b520ab6b2f5f467cd5246a8e4a6393a139754c147bce73b8dd | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28-01-2024 08:10

Sharing

Report Analysis Logs

General

Target

7c9a8d4349a195455847b2149071d602.pdf
Size

35KB
MD5

7c9a8d4349a195455847b2149071d602
SHA1

bbe9eec23cda18f47698aff6044d486b7484a8b8
SHA256

05c1c9253ea8b7b520ab6b2f5f467cd5246a8e4a6393a139754c147bce73b8dd
SHA512

0175d6670b1816ea4b2e6b50257a4740004d3bfe054d25b82e95dc85b660db010d98be140ec10ebb4c3b3e84af97f5750e79ea043d9917ffcaaa26e4b3baa5b7
SSDEEP

768:LEnZNa1T2sbfdJFKCXLCWagVYmHwymO+smx:4XuT3ftKCbRfVY2zT+smx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2516	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2516	AcroRd32.exe
2516	AcroRd32.exe
2516	AcroRd32.exe
2516	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7c9a8d4349a195455847b2149071d602.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
541cdaca1accd6f75f9f3a847ef75b81

SHA1
ad3b4353216b7eff55e8215d78e35a97c83beee0

SHA256
c9166e09b7303bab6735e5f62b2677f1ee06de44435612c6a77ce9d8f53e393d

SHA512
a768601fc082ade1ca85a834939bcdfa70cc448e2c710de5eef7d878f195d23e90e5d96a693fcc537d7f716443407e4e82779fbbb6238cb730b56b6958198e59

Download Submit