0eadad0a0e96a99af107df11557963dbb35b1151a131bb7b4062e1d537c27795 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/01/2024, 03:00

Sharing

Report Analysis Logs

General

Target

7eb4fbd9e70ec9c959c7b8cfa471f6d4.pdf
Size

45KB
MD5

7eb4fbd9e70ec9c959c7b8cfa471f6d4
SHA1

a63f758d7494e68e2d4e4c673b7db526644d31b9
SHA256

0eadad0a0e96a99af107df11557963dbb35b1151a131bb7b4062e1d537c27795
SHA512

0d73b86084c85fe97783fd80931eed02d9ba3fd35f93e7df7fc0f37ed9d4b840b9006ddca829273cc05927c2e87d3cd956a32954b983d6f826e634754503e96d
SSDEEP

768:n8iqwysO4zjzq20I0ldwv/7q5xsImvQS4pdZpFRr4JxM:kaOhSUXxsICp4/lR4xM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2316	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe
2316	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7eb4fbd9e70ec9c959c7b8cfa471f6d4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f7bcaaae7130fad51a1bacb625716baf

SHA1
2a0d02f2a551aca8fc535f705da340b82d47f6b6

SHA256
b9bd57673864c238c55a7becfb399d53f19b3d670c813fb5bbd20dd5071e48da

SHA512
d71a8da45554f7338336e093408ff735c63f06e1e78696a8d36a9e6eb5a604b4f073e6659aed16c12ab5f7454ae628e4d4763c91c283e69caf2382775fc04470

Download Submit