f7a207a96b54b7a3991a1d281eb814bb5df21771ec38672eb66c5c76c8383358 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 01:08

Sharing

Report Analysis Logs

General

Target

8aff9b0a3228190a621745537a0d0714.pdf
Size

36KB
MD5

8aff9b0a3228190a621745537a0d0714
SHA1

aade6f3619aa816c36d0c2765baab37858d8c525
SHA256

f7a207a96b54b7a3991a1d281eb814bb5df21771ec38672eb66c5c76c8383358
SHA512

ccaf54bf7c11c69e04a8bdaab58c3ea1a421b0c19f3909a97b119481ca6d06bb7d2541515e988ebcb47bf8e1c39e4315169c1d9a83c7b87823c7c4aa5e3372d3
SSDEEP

768:vM5tcRj/x18NDIsIHhYFkOjlabSLvFcyzDUEF/C6LE/GUj:26cjWtOjDW8DC6Oj

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2548	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2548	AcroRd32.exe
2548	AcroRd32.exe
2548	AcroRd32.exe
2548	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8aff9b0a3228190a621745537a0d0714.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
54aa56d618f06ab1e43a906d6778c2d3

SHA1
f6e917e97b1e1a6c3f63ea990cb1f773f5ceccae

SHA256
5889da38786bb14c4bb05de5e2956b78dab387ae9eda0f154c9d5548d03e103e

SHA512
659574839954c49a12c2e2169a604f4241b28de533d25a0bc233f3f7858560677339d06644b2236dbb8548ca5ca5d3a95bd83ff2b9a3973162e3d49c0efc3817

Download Submit