bb0f53585a254fcfb53c4a22baf782bd3a5cd3bacbdcbab49660c9a18ef07530 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
01/02/2024, 04:24

Sharing

Report Analysis Logs

General

Target

85eac8f95c09d326e17fdac80467f5de.pdf
Size

41KB
MD5

85eac8f95c09d326e17fdac80467f5de
SHA1

126ec2f42c5842a78a480fd802af9f35894438cf
SHA256

bb0f53585a254fcfb53c4a22baf782bd3a5cd3bacbdcbab49660c9a18ef07530
SHA512

e19b9065f952dca63b0ddce606550ebfc846d41ae260f8ddcd4a70eef99758cbd36ccb17861677eb5ff3ca81437abb83222da2ede605635fb9b54bc924883cca
SSDEEP

768:XfgCXQbRSMesiBb5xFRPJFMklLg2h+8qGDfWqdhMsQx:Xfv1t/Qk1rcjqd9Qx

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2392	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\85eac8f95c09d326e17fdac80467f5de.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
93d5c74207c5f3b162140b65862299a9

SHA1
b41d3a2085ec5c36beeacaa9c191b3c92889e4da

SHA256
d9c4fa0838a5b153ec40de3697292b0c206714ecb29f64cbc5bec9ee4eaacbbc

SHA512
a93dcfba9b038774068e43b4ae126bbf5c83a9fef4cb6d5817e7be5685d2cecc5b1a649d52a4eece810b4095357745fd1d5e1da845507206c42b8251dbb4d7a4

Download Submit