36d50a24551fe2759377173b5b67dfd9d6eaafeba12178c735cb0e35851ef4fd | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 09:52

Sharing

Report Analysis Logs

General

Target

9b5d00df4bb83e019284cb9369ff6b0e.pdf
Size

115KB
MD5

9b5d00df4bb83e019284cb9369ff6b0e
SHA1

85516cded4542210f5154a2a09ab5536e5f97f8b
SHA256

36d50a24551fe2759377173b5b67dfd9d6eaafeba12178c735cb0e35851ef4fd
SHA512

7b95a569a8cdf7c4574cc7439419d5796fa925eec4f08f85e0537d74e9395aecf02efd77d3ebda208bb1db3cfcef4ff12eb9e79ea822e64c39c592d0e60a06da
SSDEEP

3072:sPz2Chv2NE0RoRMx982aHkEN/FnXoHkp0gzwpQ7I:sPzPiRw0aFZln0g6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2644	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9b5d00df4bb83e019284cb9369ff6b0e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b7ac2008a2d1ab196ba4d6e9f1264bc4

SHA1
e2937f1bb290a02069676a2a08c01da2d3789492

SHA256
c302ca7eb004e0d601e8f9bb40ff16bc298eb734f62b1f6118b0cea8a29cd487

SHA512
ce8cc5f8f0073584b8b05e89dab99574da4796e9f8f5edf272de06e8122ddfd0355b1ec5b86d8e490e95c9e2efb099954f9c98fe8f76129b6d2bd6caa41e670c

Download Submit