9f55fc18613f70c21d0b721f2b0452198a4c068290eec46569c597741cfcbc70 | Triage

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-01-2024 01:31

Sharing

Report Analysis Logs

General

Target

7e8627d1825551b2c4d9aa4346475c36.pdf
Size

34KB
MD5

7e8627d1825551b2c4d9aa4346475c36
SHA1

a9dc0b918a77afde63a1e5b0c4c7d40d2c186634
SHA256

9f55fc18613f70c21d0b721f2b0452198a4c068290eec46569c597741cfcbc70
SHA512

202dc53a95b51c4e9d86a2ef995da058c1c71dc0ba39b47719f72d3c51399556a347bfbe04f2ee43e84d7b7401a774c5ed38241066f6a39956780033dbfdfce1
SSDEEP

768:4opeyAwMDlhus21Si+Ki2y6hAAZEdocdjy4Hp/W:4oIyXgEki+zUhlZVIHpO

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2528	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2528	AcroRd32.exe
2528	AcroRd32.exe
2528	AcroRd32.exe
2528	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e8627d1825551b2c4d9aa4346475c36.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e5b0d22ca77753b45b0d20adc5a32eab

SHA1
04ac4e1e6500298a615405b17761c792cc590319

SHA256
03b4b8c6b99e8996a893ac25b41b87b19c645d350a6f0e374fe507b664c68032

SHA512
a566b90561d78f1a96fa6cbc663e773cdf2c275e241d8f1c92a87ea8e66cede7583a7698042f6f31b7e7f51e2ec852bce1c0784eb529532aff9b45f88e30a150

Download Submit