d14dbed96c1d4600e5edb5ecf0556d422be55c01ad3f5fbc2f70aa604d03dd21 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 16:39

Sharing

Report Analysis Logs

General

Target

9c2807ed4858492e84b46b00b406a077.pdf
Size

38KB
MD5

9c2807ed4858492e84b46b00b406a077
SHA1

d0a7635d2947a561245b7cc7679188c31249194a
SHA256

d14dbed96c1d4600e5edb5ecf0556d422be55c01ad3f5fbc2f70aa604d03dd21
SHA512

d5a0fcff3809142dd1c8d75b61797e1ee7d7cc0156f7748a1416b8a694ec5ece93026fc3af3a3afd1c9be3438affaedd8cfd75dd4cab9f16f12fb30d0ed3d402
SSDEEP

768:WpnLkoJOyFwWHgUeof3PESP4+ArBZIKwr+S:QL1O4HgUVf3PESH6BZIKwr+S

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
860	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
860	AcroRd32.exe
860	AcroRd32.exe
860	AcroRd32.exe
860	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9c2807ed4858492e84b46b00b406a077.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e0c4a0f8245cc161d9e63a55c4fca8a5

SHA1
11f5dbfd99cf453ae2a415b5e6c683c56c0b04fe

SHA256
aace38ede4aed3d117e788e6a2c98353bb21caa9af33b836605ea1695bb45eb9

SHA512
7d4d088446e2f96d2e18aebe1ef446a4495372d313bd070aed9f32fe6a326e6d785229b0b7ab713ddb3322ce06269214a00641163b9185d5609200079dabf9f3

Download Submit