b7f8b63d810db311d97ad8d1023b2950f69eca06021f7781a96708aa7d1674a4 | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/02/2024, 15:55

Sharing

Report Analysis Logs

General

Target

9c147d2ab0f20442370c70096cfef741.pdf
Size

103KB
MD5

9c147d2ab0f20442370c70096cfef741
SHA1

7cf8511075752bc58c8cb3ca430eea39b572eccf
SHA256

b7f8b63d810db311d97ad8d1023b2950f69eca06021f7781a96708aa7d1674a4
SHA512

b6f3c3cd3e75b4f17bfc269bc575f6a2251801f0ec8b330c7098f6bae2ab408b8a9bd4ca4b312895390702e542f85cf76b592ddeebbdbafda50ce73c0ead167e
SSDEEP

3072:9kUYQTng7XqaQw0ycvgnayUz1E66Pd/JWCtQ0e3:9kUxTg7Ow0yOmadJgxJ9y

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2224	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2224	AcroRd32.exe
2224	AcroRd32.exe
2224	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9c147d2ab0f20442370c70096cfef741.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e18708c23eaba6719cbba19a24518ff9

SHA1
d92aa405a6eac92419f981f97bcbd148330a869a

SHA256
fba8d711522e76a7d06b0cbe989c4d8c3225ed8626105ae4f1f4775856e08325

SHA512
758de90c598780584a90d1da9751cd371861a428d47c293367e4841b82d1277e529a0c3fedb7270e43d22c7fd08f2b9ea029c2ec0c5625255c5a7c27fd7e8ef3

Download Submit