2efcd3b2ec893286fb05e1368fba9691ad0c4f2e5745036fe7467c798e0a7eb7 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
13/02/2024, 10:55

Sharing

Report Analysis Logs

General

Target

993d409f270e22852d98347f72a608a4.pdf
Size

35KB
MD5

993d409f270e22852d98347f72a608a4
SHA1

a9d8fe79c1b40bcf3de11c7b3080ad8438206618
SHA256

2efcd3b2ec893286fb05e1368fba9691ad0c4f2e5745036fe7467c798e0a7eb7
SHA512

b8ebb214701f7ffa75a67619182986a6b85afe0acb1b3f42c0257aa9e868486f038e0adbd9fc6e4c0dcf09924cce8ce9331c3278ea0f4318b65afb82b10cd245
SSDEEP

768:qeI37ksALosN+l3a+QGH+tN+X7pxCcuRlllLG0l:Yg/2lL/H+D+Xdkc50l

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2656	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2656	AcroRd32.exe
2656	AcroRd32.exe
2656	AcroRd32.exe
2656	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\993d409f270e22852d98347f72a608a4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2656

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6dce91ab91ff08a99e10267397060675

SHA1
3ecc07bc1ae1628cad38dc29ee2a8f8438af3a78

SHA256
c4349b2ce02ed96c5bd772f41f800e8641dab93fdf63b221bdd19e398171783e

SHA512
f5a933f1d2b29ca4c63d5a3b2832e74768b92c04871461a1ed1aa0591dc7645ecb268c47abca3624b5e7a9318f67a369c5d6230c552abe25b7b6a2fc48788bb1

Download Submit