b236ab15ccfad8c54ab1987ba247483fea4c2f3915047d16dcc65a7e99fbf5e9 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-01-2024 06:22

Sharing

Report Analysis Logs

General

Target

401f2bda5a9259fb5699aebaa2ef0d34.pdf
Size

36KB
MD5

401f2bda5a9259fb5699aebaa2ef0d34
SHA1

6d5927ae40ced981815c1b95b84a9c013231ec87
SHA256

b236ab15ccfad8c54ab1987ba247483fea4c2f3915047d16dcc65a7e99fbf5e9
SHA512

5d38ed8675debc0631f4b3287c6c9b72d577c4b82ee79a446b0910908eb075d7f666037bfdbb65e3c8d583b87af9e13c36d7ebd02161fa2f5531133346183db2
SSDEEP

768:IaIs8ja8shhsEHMTfRyb4/lEY20zYa38vkIX:Ibja8UMTEU/T20ztssIX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2004	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2004	AcroRd32.exe
2004	AcroRd32.exe
2004	AcroRd32.exe
2004	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\401f2bda5a9259fb5699aebaa2ef0d34.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
99bf6f5fba31a508fcf1bb93e0858936

SHA1
c64db66b8f495bdff933522593e1210497f1e504

SHA256
3a973c58f287a50526d50ebdaac227453cb0aed80b924e6e319d0ea908168354

SHA512
e3b457bc14bb64b8fc50562763a451896f1d062f66fcd4939d892d6dd8cfda8b4f7133fb0f550529a7673adedde033ca2463043c91be7b4e9b4e6e9bea183541

Download Submit