92231b19d4e45cab16ed9415d7038a55acfeb47eb2d48e19cfe6cb4819b152db | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/02/2024, 22:15

Sharing

Report Analysis Logs

General

Target

87cca60b8271238399f0b79b1f2b3781.pdf
Size

66KB
MD5

87cca60b8271238399f0b79b1f2b3781
SHA1

1157f3b42b47b1ccdf5ed5dd60d1f0fd5b7892d7
SHA256

92231b19d4e45cab16ed9415d7038a55acfeb47eb2d48e19cfe6cb4819b152db
SHA512

5a0d21c11aa0d32675146f62516ec4c0659974c42b9b7b4366d24eb87d4445af6d1cc280d0a7a79256d3e46336695fd2b04e9376ceb50e1c776cbdd8502b7f03
SSDEEP

1536:gfGveBJG2wcJXqxcdrjq72st30TRXBq4RGOtVBGeMlB:Tv+JG2lnVsEXX5LoeI

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2448	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2448	AcroRd32.exe
2448	AcroRd32.exe
2448	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87cca60b8271238399f0b79b1f2b3781.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2448

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
68e881e3422d07f25a6128bcdd8e958d

SHA1
b9ebdf8a86cb2ab0ee49081b28c772054ac53bd7

SHA256
a6548c2f32734aa22aeb516b794043105ca1d3bd25d03bef4b8f393ceb3abeec

SHA512
eef63eaf4b7904c4bdbb3e494318478ec9db0779410d6d830ae894b91bd2e5f01da175777cacb16d57465da3501653c65ab5880197b98ad2020dba152da85b92

Download Submit