c76f994153d847520aae61c6d3e798e38f7e28fff99543652ad0db5a4cfa78ea | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01-02-2024 02:35

Sharing

Report Analysis Logs

General

Target

85b44176e2c757ac4d27e126ed593cac.pdf
Size

63KB
MD5

85b44176e2c757ac4d27e126ed593cac
SHA1

b8912208996397d6101f1aa887096a6303b9886c
SHA256

c76f994153d847520aae61c6d3e798e38f7e28fff99543652ad0db5a4cfa78ea
SHA512

ca480afad66f877fead319c8af1f9b7504e8b9bb4ae7440b30ef4fdf2a8510453b8c0af890c340096dbea974924feb1f87f5e006a5100c850d977f4488bbcb2f
SSDEEP

1536:phQfRZdejg1se7EJWnTQiNRgZKIibYqjPuf9k25f3WD:YT9iAE6dOGqkRD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1916	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1916	AcroRd32.exe
1916	AcroRd32.exe
1916	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\85b44176e2c757ac4d27e126ed593cac.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6f66b4df9e5c8159350e29dd42998a44

SHA1
bbf18fe863f35c6f95d15b3d4d6e62d486245596

SHA256
6e9bb6bddcaac5995db1b90a80be3286cab80d83db948fa229c06411eb068efa

SHA512
37bdd3e5a3c91b8f7b29fcb2a237cf96bedf5a844ea22a7187e36d416a8459fb448c0e7b036539e9709335278a8b91d96ffb73b9283e0243775e62ea0aca3ce3

Download Submit