daf9148ceec2829007ea408e86227a6a6df430fe38b6df059c7b8a243767b393 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 01:42

Sharing

Report Analysis Logs

General

Target

9a71e34ab6e7a918064b374ffd3523f3.pdf
Size

123KB
MD5

9a71e34ab6e7a918064b374ffd3523f3
SHA1

c6fb148974443fe333b542192013c4812575f359
SHA256

daf9148ceec2829007ea408e86227a6a6df430fe38b6df059c7b8a243767b393
SHA512

f19e2b87505a0d6af3d12af32c50fa86d6cbcc161f7961d714dedd057ad636e9cf6275a57cee6bf7b54dc7a6c3f23b000bba330ec029e7efc5b40788e077ec7a
SSDEEP

3072:H1nHFvYII38dLCEApEwd7X1N5JR+C/LDijmE:HnvYIIshop9dbF+tj5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3048	AcroRd32.exe
3048	AcroRd32.exe
3048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a71e34ab6e7a918064b374ffd3523f3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
30129e7e3feebf310e8ebf11cfac82f8

SHA1
8b9f8cbc75549919d9670d0a6aa74bd37a93b1c8

SHA256
f59c1168c9fadcf5995d496650334f8ac7992ec1dfbba2d88024496aac5088dd

SHA512
3ad4702aaf5c8bb943d37ec575cb9e53c84962e7a654a894e16af21cff4ad4cbd3712010f1cf1b193d09d6a9c343d2c4a96947de7a80aaa90a37cf97e045311d

Download Submit