bf9d0aff42079978837d292805b16cfdc17134eb1acef153209d52a9934b33bc | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02/02/2024, 16:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8a08d457e26675fe527198d60eac0efc.pdf
Size

35KB
MD5

8a08d457e26675fe527198d60eac0efc
SHA1

421109f4cdaecfc03aee370d10806cfa58fd4000
SHA256

bf9d0aff42079978837d292805b16cfdc17134eb1acef153209d52a9934b33bc
SHA512

f0b6de17d7c2d29542dd0692fbdc99fea3258b5839853a6661fd5ebdcf9186673c6c022ad4ef2bfd446b5f976c20ebcb7c25a3f6fac3fd60a3e2fe72e446bd26
SSDEEP

768:0dJKjxq9OVXHBCezDjwjm78l0+13Tqqxhb:0dJKjiQEyjd721Nxhb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2392	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2392	AcroRd32.exe
2392	AcroRd32.exe
2392	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8a08d457e26675fe527198d60eac0efc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d167168d88a903d04cbc108bb1ed43c0

SHA1
e4130b2d319cb94009f9bfc5d8e3b293d026c260

SHA256
fd66c7b516ee09b6b62a63897bcc8cd23e9b3242d3f41250e44a2cf0b2566992

SHA512
b8ccd7e3c32ab9ddd390b379196b91f12316e02d3e708fdb253ac5921aab5e9c11ef6ea6662ee984eaad4d9647d8ec7f43fd10e12e32d9279fb00fb51b947e8a

Download Submit