ed49c8189614111dd76cd537f1ad2f305279324a0a0b97092f937baf4a2746f6 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 00:29

Sharing

Report Analysis Logs

General

Target

9a50a93ac637d31fe4b4876ce69ab33e.pdf
Size

40KB
MD5

9a50a93ac637d31fe4b4876ce69ab33e
SHA1

5340e716b8017db9c58d8f472eb0c2c73ab13672
SHA256

ed49c8189614111dd76cd537f1ad2f305279324a0a0b97092f937baf4a2746f6
SHA512

f919339b23efe17c37bed15ea0791b8fa55a3d66ff232c0b09318b059c2ee56a33a4d521988dc077e95923ca91eb977693b4b27cf12c4ce23f792b6ed307ae64
SSDEEP

768:xe5AGmSCG8EJ1qZD3P1gqtdUXFV1Gv014uzlp8J8o:x0FCPBs1Svq4OEF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe
2052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a50a93ac637d31fe4b4876ce69ab33e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5ea9c0e4227b64428513d2dafceb3ae0

SHA1
ac13521093de11247eb48166d2c638191a463892

SHA256
ae1f6e389aa3e2c4aa4654eeb1624eec94fb7846f353d2bb09f406bc950fc204

SHA512
e620a9c5a39f9fd6a4ea64046a48fda3a8032d7339ded5b988736092c700d4feecb219f0e9d7f4947a62b9c2515ccf89fbe74d0ce9e354c922432e1d652f46e2

Download Submit