5ab089d8812e1c15ef3b77799a03e8a1393618b02dafff50a0af0f9004cca052 | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29/01/2024, 06:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

7f22850f5d74c9e37ffd66c06170fca4.pdf
Size

33KB
MD5

7f22850f5d74c9e37ffd66c06170fca4
SHA1

d24ccb51510f2b0c7b4119319fc2287d2af8144c
SHA256

5ab089d8812e1c15ef3b77799a03e8a1393618b02dafff50a0af0f9004cca052
SHA512

c07f9e682054f745ec4d170decff6c31addf06307b1bb53bba04efc8a2d9944d17f56d63356c751cffeccd113f28664830c9a761b515665eb27cc0f25642d49a
SSDEEP

768:n0rwY5st4lr0MNh/4eWCz8lfUQfKXUuQO/D0H/:0sxGYMNhcc6+dD0H/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2552	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2552	AcroRd32.exe
2552	AcroRd32.exe
2552	AcroRd32.exe
2552	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f22850f5d74c9e37ffd66c06170fca4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1b3da2ee6fedd56987a432519e8086e7

SHA1
6eb1151e061056795d7f3d79b31fbbecde014376

SHA256
c8355603b20337c7fe5a18cef2d05266734befd872ba06f74e9ca077e52af38b

SHA512
c74316d11d2f38895f13e829709d8eb4757e8e562e3a6d3e144227f214a38f4bbe0d262769dc1e29001329cbfc0d7aae2d44c6b125fa6454d0649ea7ae29cf49

Download Submit