3a9fe0b6af420c3685011e7fb26228a64905cc2f004b833ce8c7e51ff7d4ca2b | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 06:28

Sharing

Report Analysis Logs

General

Target

98b63f72de0c7cc61e410cf63c07d8d6.pdf
Size

37KB
MD5

98b63f72de0c7cc61e410cf63c07d8d6
SHA1

c544cbf8bdb1b56a313726dc2e5a1cfe7f347fac
SHA256

3a9fe0b6af420c3685011e7fb26228a64905cc2f004b833ce8c7e51ff7d4ca2b
SHA512

4e36704850874684e62e66a30230c53025a0690c9ecd72e8da36d10661179c98afea59e3e4ad0d3b8aba6e54b1be3989cb43f32b9eb79682e9a0460c01323dfd
SSDEEP

768:8XrvIWbK1Ky08asFBPYxfV1FUXBqLizRcki48VJoLc:8XMWnPwOrkzik5CJoLc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1988	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1988	AcroRd32.exe
1988	AcroRd32.exe
1988	AcroRd32.exe
1988	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\98b63f72de0c7cc61e410cf63c07d8d6.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f7b058a3bf71a284d3316962209bbcd6

SHA1
38ca9c380a5c78e68d202e14af78b66bd89c4554

SHA256
2007eae8e51a1b8edb86e4b6a8a02d0929f61094a2f944a697c174526a38ad8b

SHA512
fcbb11ac48004c0808e0a4f96280cfe77450b7c755ff3e4ae76bfffca2962c991ace92f9b09d337112f7a0fd1e07bc940e79592303cad16a3eff6e91a8e4bf53

Download Submit