5da0d7a4a0a7d7bf1ddf28a1c2fd943b8edd40431097c491e773a1f90c9a84f4 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 08:36

Sharing

Report Analysis Logs

General

Target

9b3822a11c9e94763150282f0c9b1d01.pdf
Size

2KB
MD5

9b3822a11c9e94763150282f0c9b1d01
SHA1

25de15936a0c5b986b6b3e1c7876b0e940eabfa6
SHA256

5da0d7a4a0a7d7bf1ddf28a1c2fd943b8edd40431097c491e773a1f90c9a84f4
SHA512

335dd9d7669535c7c60579096baf8d3561602df0440820d3ab856b6d5962e0afec6ed8e4c5f364da7f31238ed6330d90fa77e2a0e1e4b5b1d2073f4fd0428809

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2300	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2300	AcroRd32.exe
2300	AcroRd32.exe
2300	AcroRd32.exe
2300	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b3822a11c9e94763150282f0c9b1d01.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4c985ebabdeee7bd5517ec9131b06f00

SHA1
ce8e39ecea80fb1f5e955bf817a14be74893e1ff

SHA256
763887c8cfeb05b73b6f17d978818527742a216b41d9a12f6cef1890f7dcdbf8

SHA512
b51b17e3a28251f96d57a08ae2a76e9ce52c8d6384d1949156655ef68c589a9202bf8c86f547251325b182e1d486f7023663930f4a77d0086da4411d6cad2940

Download Submit