8e5aed9aed90b1adb4c700b7d50dba3d2564ea6da6d767cd2d4931ab5a017e2c | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
02-02-2024 12:10

Sharing

Report Analysis Logs

General

Target

8979844f73702d96abfa947ecd7991e8.pdf
Size

58KB
MD5

8979844f73702d96abfa947ecd7991e8
SHA1

ad6b5d532d12145e1685ec2d68c8ce1128e81fed
SHA256

8e5aed9aed90b1adb4c700b7d50dba3d2564ea6da6d767cd2d4931ab5a017e2c
SHA512

ab2a24e86d9610868712ea7c6c3cc453e478c2b8c6e7a13b5f9095c7f815018e83dae7f06ba4353bce1ae0fa572380e1cc65abc541bd1989ca49bed6e7b63c32
SSDEEP

1536:d5FaLMTNGz38cCg35xHv9F6VX9L5vpF9HfadueH:3FaIT8LpjFYtLz3faTH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
944	AcroRd32.exe
944	AcroRd32.exe
944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8979844f73702d96abfa947ecd7991e8.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5d8267aa1b822e02f9e4b98e7327953b

SHA1
05c9306a28235c2c9776d61527bc654c4efaf94e

SHA256
f570577cdd263f7faa0775281c9d74a149042c4c266a1165570f59ed9165b0d7

SHA512
0843a1bfe4ac0c1930081eb9cea4435f33e111842c0335ca3109a4996b8b5d012548fd6b2b350ff39fdbccaa7e1acb4d2dbfc28ee45436bfca3a367565e5faa7

Download Submit