31cb86275981294b433075dfb2f3fe316be8e75e183a836161a13d1fcbc366a1 | Triage

Analysis

max time kernel
118s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 14:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9bf0d211061e81ec26dc58709a0ec450.pdf
Size

41KB
MD5

9bf0d211061e81ec26dc58709a0ec450
SHA1

f58c39dded47627e8e9712b965dec1835fbf68c3
SHA256

31cb86275981294b433075dfb2f3fe316be8e75e183a836161a13d1fcbc366a1
SHA512

d8543a80705c9de253b6632b07b908a5e21d92f10127a8a21f976d6b24b93148d809c602bb7af7e00ea122af742471bbfd4572c1f13cd8b6567593c558716280
SSDEEP

768:FT5YnEB6o1do5wGDOFyhD2nx0sToRdSHkRQZdtc:FKnEB6o1iU0WoRdSFZnc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1632	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1632	AcroRd32.exe
1632	AcroRd32.exe
1632	AcroRd32.exe
1632	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9bf0d211061e81ec26dc58709a0ec450.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0a337286d1b538640992677fc7776b5c

SHA1
a7af0ec33c3243b65ce4ef1729b28146c611af2b

SHA256
a450a674d88380278e94cd19a7d9e12dd531e9feb02dd16bb66593c8b79f7b78

SHA512
5fbc32e6679d361e4a6049f7a94a56ae06243f809c17d63b2ef7b25c0029b1b64dd12fd39bbb91844c8aa83f462a3ce2143538f3e3d43b00833b358f7ec19f07

Download Submit