efb1b500eeba342efcb6fd74050a6dfdbb38862b33f4e0a6f59b6b642851c49f | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 03:15

Sharing

Report Analysis Logs

General

Target

9619ff4479bc56381123d771a51c2ee0.pdf
Size

72KB
MD5

9619ff4479bc56381123d771a51c2ee0
SHA1

165d2b87a9bfa22d1525f4564ebe0e5f9fa0ec28
SHA256

efb1b500eeba342efcb6fd74050a6dfdbb38862b33f4e0a6f59b6b642851c49f
SHA512

c816c5d4bb923594ad78cd8a1620d526a2e6152e7de88867790f15e304e8a19485038fbbdeb0757ed82dca0099480f859829c9eefb0816eacfa0471de067a287
SSDEEP

1536:CRGydeccaJrpCp8t+meZRPMnHaqJ0CiR+bks8DRp:FUcau8gFZRUn6U0jcbx8H

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3060	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3060	AcroRd32.exe
3060	AcroRd32.exe
3060	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9619ff4479bc56381123d771a51c2ee0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
69a7ecdfaf0e312ea99e9d8951901470

SHA1
1eb231f4788b642ce14745716beb618eaa362fec

SHA256
be9075e8c28a8884448fbed755d921f24c2f7edea6818d08e963f28280ed82c8

SHA512
a67b85ed7312f712c492d46e2636065b7e50b24bb082910709524fff137d92765c3c0d09a88756135086dccf718f4c4e22e9adc76305be16d69f5792adc5309c

Download Submit