8f9fc26a9ce2fcdb98ad18528aa50ee09e3524a752b1bcc4b91f6e9693f5e300 | Triage

Analysis

max time kernel
151s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
12/10/2023, 07:01

Sharing

Report Analysis Logs

General

Target

yzf4fqme.pdf
Size

558KB
MD5

6be20b258db298718a31073f8585587e
SHA1

4a881da3a0289c0b90590c2c3ca90b16085e1b1d
SHA256

34479e0db44ce5c888f5d04ee84b07b309df20602f247d3df1ccb85dc9d089d6
SHA512

089d06605da51ac16f0d9d17efff584884d588d48cd5efb781c3085440526b4c585005c43db02af2e1f03c5886119ee2e4c0a0e61d5f1ee89ffe2d169666ac68
SSDEEP

12288:ke0cJ/xwEFfRs2T4wwPo8iFZgu/HzbmB7mgU1iOCMU1O:kUzw9iFLbmYgXOCH1O

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2952	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2952	AcroRd32.exe
2952	AcroRd32.exe
2952	AcroRd32.exe
2952	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\yzf4fqme.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ab2df64ccaafaf17731ac4e15bea0237

SHA1
23e77dc103ae9844c501ad5728f256c56fb31644

SHA256
abcb05d3f36450ae4d0838af1f495ecd088f2567ce5eb542ccd9047192c61228

SHA512
f90a033e88edec60f723e33ab0717c9d7cf299d4f35153c6613c74829991141d4bd54c4107e53d7f622072062f0f8ef5715bfc178589c93b0b369f1f643ac62e

Download Submit