1fda402bb6307ae5404609ee789a6913e9e6e358662c138d8f96e051626d38d9 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28/01/2024, 12:19

Sharing

Report Analysis Logs

General

Target

7d1b933934ae2133419ed9f14e60fc11.pdf
Size

107KB
MD5

7d1b933934ae2133419ed9f14e60fc11
SHA1

0d6aed662643a98aa6b1b0caf0fa15966291eda9
SHA256

1fda402bb6307ae5404609ee789a6913e9e6e358662c138d8f96e051626d38d9
SHA512

3859ad13fe416268665ba07ae4415a337cff52e446103f142ade93ad9cd49360521ec31cd49df91f134d501969cdfb12adec18ec2cf236f2a3e96a5a1bf68744
SSDEEP

3072:nIILAfVpf/7KHVLarsl1caZXrNFrg7R9Sy:IILAfVJG1Lawl1hjrMnV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2932	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2932	AcroRd32.exe
2932	AcroRd32.exe
2932	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7d1b933934ae2133419ed9f14e60fc11.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c8581145093a35cd8007e60d0fe9bacb

SHA1
037b60b563a563a28561dbd799a262d5d0571a8c

SHA256
c7586b1514ec7ff6064e84607044262bb4283374b565eb68e3af7abf074c0297

SHA512
18bc7a5ea59456beca0971ecfcd7c01c27d96e91ded571279ff382ed3c3e74eae060d0f0a72b8af91a18f78b21d0b7790a4670ac8a17738e37b7674021fa2123

Download Submit