15066ba7461cb560029d69080bfe220b7c8793324bf9e18e5cc06ca58993e8c5 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 15:09

Sharing

Report Analysis Logs

General

Target

977530c28846fdd189e96d551859dcd3.pdf
Size

112KB
MD5

977530c28846fdd189e96d551859dcd3
SHA1

968c64d306b16267aa6c05955ec247160f7f5e9d
SHA256

15066ba7461cb560029d69080bfe220b7c8793324bf9e18e5cc06ca58993e8c5
SHA512

d15e0a4bd2ca57a1ee2062917b7ed529baf2ee7c8e54d34d884bdec03cbf522cbddfb2c046b8be092f0f62557a9b2a3138de10e23c88069ca654f2cf5317062c
SSDEEP

3072:PgxgOmSydfYeubSPWzChhTbT+KCzT1Vis+mOcoe02:IxgpSy1XWzCnZQ0ej

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2272	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2272	AcroRd32.exe
2272	AcroRd32.exe
2272	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\977530c28846fdd189e96d551859dcd3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d228fd0925e3ed3b774570d3a985f92b

SHA1
74114abcf8c12e3147f68f1e644c526d116860d4

SHA256
82d0b9038155ea79e7b032681e1b49fab1a5fd392b18d4ac9e32229e5145510f

SHA512
e1dd82bedea49974393cf7196ff80e00cb7b7531bc8d10eaa76e8d0163da06dc2baab7d52a2b812e3fa17f307629ed5471e53bc5beb9183a5598793729de4b3c

Download Submit