ddd7f03d47970e7ad972244bbe9fa1f0f719796fd6cce01cd9af4bbd261c3b2a | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/01/2024, 01:08

Sharing

Report Analysis Logs

General

Target

7e79e77ab25b0ee89690e0f3733d7196.pdf
Size

35KB
MD5

7e79e77ab25b0ee89690e0f3733d7196
SHA1

c93920dab23a96f0e04f96635f9e0f3bf65bf1f9
SHA256

ddd7f03d47970e7ad972244bbe9fa1f0f719796fd6cce01cd9af4bbd261c3b2a
SHA512

8bcdea9bc7007fa10f5b2ef08dcb588f4df49dddd75e2f289e7ffe757e606300bde8bd43cfa9547fa45912e4a15bc38a0d3e7901e2eea545ebeb33f5b29cbe95
SSDEEP

768:3JjN9iwsAsw8Aer5LoYAl6j7xfA8Imi2Bl6:Z6wsBjcl61AIi2BI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2876	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2876	AcroRd32.exe
2876	AcroRd32.exe
2876	AcroRd32.exe
2876	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e79e77ab25b0ee89690e0f3733d7196.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1c3b411f077894d42fd3a3e2e06da8fa

SHA1
04fb97508e271be57fde1f5145a58c421bd05e9f

SHA256
d2709ec8410f921017ee4575175ab79069338d58a55901a76a362e454ae62b6c

SHA512
f15ef85dfcfdd125cbd09f6b071e3c8f72379ba88ac0c2607fb838d192d4deaf499d2a3bbc83c157f3e21035469f2970fc4b2900a97f3def9029c0fcd92d690d

Download Submit