853016186920aab9e5d95fc4179dc18ec2437d84ac0d517101468d5aecf47142 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 08:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7caa1b9e3f99999ef21145999c9956cc.pdf
Size

98KB
MD5

7caa1b9e3f99999ef21145999c9956cc
SHA1

49fc7774ac7e9297bf8089224bc256816fefd19f
SHA256

853016186920aab9e5d95fc4179dc18ec2437d84ac0d517101468d5aecf47142
SHA512

b611e839ed31eb2e2e3ebcede804988b9a3dc2789dd860c9f8637fa425993a5a88c5942ebb13ad3ba5a39221d6b0d9c4afc65af107aa686260cfdbe7c053e28a
SSDEEP

3072:IC3/uxS0eGUS+qFacDc8W4KjfxtqEwtQHdn:1GUSewWzZtpV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3048	AcroRd32.exe
3048	AcroRd32.exe
3048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7caa1b9e3f99999ef21145999c9956cc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e6fb8be8d5c982e2ee4368373be434ea

SHA1
7cf3a0c24eaf3385d13c55ed26974545c6fcea7d

SHA256
01f13ad77ff92bbac1e5f1e115ae70c1c17f9a988edebebf2a46f08656dc7bde

SHA512
c10adf1c400efaadc26b1643e57be6fa3c36d977267c37f978fd22d64be121965ccc8b6fd0769c96eb4c26dff10833f28e05d5e6ffd025dceeeaa082fa9b1b99

Download Submit