b4f01bd527facb1a563080c81cd55a7b8595b0123b35f014a487d73102198283 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02/02/2024, 15:40 UTC

Sharing

Report Analysis Logs

General

Target

89e67dbd4b7d64f6614fa58aa5ede2ec.pdf
Size

97KB
MD5

89e67dbd4b7d64f6614fa58aa5ede2ec
SHA1

7976827803d8327ae776b278917f63d1ee8c7a01
SHA256

b4f01bd527facb1a563080c81cd55a7b8595b0123b35f014a487d73102198283
SHA512

934a1babb456c03f7bb043423fd9656e9d5a5e065755cbdb5dce69b3ccbfea802e8b2bc9ad46ac02b6ce66ce4c57a7d060b428ba1450a754175ac02c778be823
SSDEEP

3072:tzUQBboTqpNfmPeYv/smPtUv2YHnkjrWHRe:RUQBcTMNOPeqXtlY6rWHs

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2332	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2332	AcroRd32.exe
2332	AcroRd32.exe
2332	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\89e67dbd4b7d64f6614fa58aa5ede2ec.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fb93f0b4164826b3d54d55107cdaa742

SHA1
52ae406e7abdb2b032b56efbcd664dad5aafdcfe

SHA256
5bc95105d26d7cd7bb3edb6efe08cac3c803411f52d3fba4466282cb84e142c2

SHA512
8f82ce030061392d10afc46d8a17c3c09ed0fbf5166d02c35dac23ed1108b853a5500dce0f8ed36fb8df087ddd1fb7fc1c408ee1309a39b54b85ceb4db9a03d4

Download Submit