f47dc2c7d2483400b802460e05c6b0d9f9ab56855d0437964df2e49887828964 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 02:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9837fb4d260f7ae10590ac0a9d1659da.pdf
Size

122KB
MD5

9837fb4d260f7ae10590ac0a9d1659da
SHA1

b300dc3d2c5b6097305e4944ada706687d22308a
SHA256

f47dc2c7d2483400b802460e05c6b0d9f9ab56855d0437964df2e49887828964
SHA512

5f5d8f8bc2e848c3eb25d5af6aabac301b89b2240c7191a212d987f5fb74ca53323bf0eb30a9c3c4b5c0ad427b5e451ac9f7722afbe5a79f854feab4a3ef5010
SSDEEP

3072:tvoO5IMCL05XFEZKi2S4fKaP1HgD9WjkSb6wr1TH:tV5C05eEij4JO9q/BD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2636	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2636	AcroRd32.exe
2636	AcroRd32.exe
2636	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9837fb4d260f7ae10590ac0a9d1659da.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b1cd6f6558eeb93ebe456a7a67828b74

SHA1
d05bc6c808e2f55d9163c6c891a3e97950285f7a

SHA256
4f99e887975887c0c33409a0ace3d257798bd7a0502972f1a328aacfb2ac8121

SHA512
d1d9ee9f3e8c6f73c5849fa455bd1946e0fc38c4105386575a5adc116d0489a22c41ec75a6b536e51023f4e9e80186a5b0e56468ff34ef2b84b56771324ceed9

Download Submit