62a88d52b2377b455e7a52b495b4901f76de79b2375525a6cfa6ebdeefdf616f | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 00:39

Sharing

Report Analysis Logs

General

Target

9a55f7c05ff6f431872eaa1d5e2ee09b.pdf
Size

114KB
MD5

9a55f7c05ff6f431872eaa1d5e2ee09b
SHA1

2c7e636d83cef34ea6c2c2c0bcdbcdf6797a3d46
SHA256

62a88d52b2377b455e7a52b495b4901f76de79b2375525a6cfa6ebdeefdf616f
SHA512

20a9914c0214f6bf99e66732054076f5f88683d198aa79ec87a84e45341dc680f4415fe7456c7ae12939b255648047798e66a01df35a39743178f55c4050be77
SSDEEP

3072:mlkEu9Rhv15EqpQkKmw2Jy2fVXa4qiaqUsj4CCkZam2:Rh9VpkmdJy2NNjY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2340	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2340	AcroRd32.exe
2340	AcroRd32.exe
2340	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a55f7c05ff6f431872eaa1d5e2ee09b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6a755f9cabbddea452349b94e786ae6c

SHA1
ffc6ffe60b28207e35ae6ee664896d99a67bcb0f

SHA256
4ede88db83b41de8385f5f6d1b96a8685419f649bcbd57593620075f0e6112e3

SHA512
c8a5a875b22701f1c2f2005d2cf47227f8f9d5b1a7c927cb16de15f133f82495750cc7cb683674d07ac5ba58bd3109ccdd75a4d9801d0d0fd7f86ebc0bf55a26

Download Submit