0bd16ba1c680201905791d7bd375a57fa69de3d14fed81317515a38f86e70740 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 01:26

Sharing

Report Analysis Logs

General

Target

98205611f96839af462ef479f61d6908.pdf
Size

97KB
MD5

98205611f96839af462ef479f61d6908
SHA1

89c2317b80601a67fc2bc2086174d70149b86907
SHA256

0bd16ba1c680201905791d7bd375a57fa69de3d14fed81317515a38f86e70740
SHA512

78c5ff3139d65a1344034791307d83bdd7799c68b463faf9f7c548e48597ce19b6162a3867250add4bd6e72831b404a918299eabfc7d558f024453ae265b8b05
SSDEEP

3072:EwUVbFVHblbH8OKXnthL3cb851xR7Ff393:VwBVRbz2L3cb8Z5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2108	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2108	AcroRd32.exe
2108	AcroRd32.exe
2108	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98205611f96839af462ef479f61d6908.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
73c652d2c06f2e746aeb7073378bb401

SHA1
ef95868e63b99cfd63ab17f942a54b2fddc0cbac

SHA256
57679254a425db14a38e9cda592485806e128d6ef42ca0a8a642c68c44ffac44

SHA512
92b26ec89dd9ee4a054ebadbcd19e72070f953932d74ad79e84eb1a090dfc189a53a016c686a810339d70dd793ca874b10a89682cc3f06b020c11a104e2d32c2

Download Submit