da9eb8d9c17d8e35a7532f8dd3f5b957f1fa5a44ffbf7eef34e7120b7b58b122 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 00:44

Sharing

Report Analysis Logs

General

Target

95ce495171712a9a13ec784db4f70c08.pdf
Size

99KB
MD5

95ce495171712a9a13ec784db4f70c08
SHA1

bc3631b37c4edb98021ece4069facb914c8400f1
SHA256

da9eb8d9c17d8e35a7532f8dd3f5b957f1fa5a44ffbf7eef34e7120b7b58b122
SHA512

e249654c7696b5a2b7408f314d2328130c197a940f27ef10ffc22b59642047bf969081d9dcde97506602a97ee6a12df35f56a5622507d21b650f2ace6ab10663
SSDEEP

3072:8daMsQyp60hI551Qq/BkPZCBu0yDgII9tQ5:ka+ypRQ7OZVH5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2204	AcroRd32.exe
2204	AcroRd32.exe
2204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95ce495171712a9a13ec784db4f70c08.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7d8d8e98b2dcf51d7f222dca7e78f9ca

SHA1
79b071d0e9d9926b9f081347ee0cc0782f540e52

SHA256
41d8a219c18fa56b4eadb86715160274a30def9926c0ad674878507c9c43386d

SHA512
a4b387c02aa2b8f36fb4338276c26dd99ed4988c8854b9c9c662636924f1ce8ec9b153608d22af484529f1ed5faa4055917b14ba33ebdfd248bd97970f63f94b

Download Submit