7c78c34a868053af851b56196509f65d5f1d5e910e96b66c0e8f712dfa9d6ade | Triage

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 06:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

401820cc414a6714704a0a22cb6ea333.pdf
Size

34KB
MD5

401820cc414a6714704a0a22cb6ea333
SHA1

3547030e6807150719962b5d8847cce87cca4555
SHA256

7c78c34a868053af851b56196509f65d5f1d5e910e96b66c0e8f712dfa9d6ade
SHA512

cf162cf9ece1a91f39b77e6e9e87845231ed85e610a55dff7bcb286488142b34fc2af7965e430e7a8af78ff3077a3704c67a917ae3c34e385d71e4999067ed1c
SSDEEP

768:gC5NFvvzvL2BjNqy2AM1XyRXYmbOVles7367VJ:R5NFv2BjN9OoRomugse7VJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1868	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1868	AcroRd32.exe
1868	AcroRd32.exe
1868	AcroRd32.exe
1868	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\401820cc414a6714704a0a22cb6ea333.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d28a32da72f09c271c17cb9254579dae

SHA1
61dec65b20c72656c37d824da0b4939702865694

SHA256
eeeb202de5f20a14963aa61fcf90ffd34a2ead61a8d91e0f2e086bab1491d7dd

SHA512
465b9e26de1f9704ec6134333e59941c2d4b7abcaeb734e0409008afdc2c404dc32b9a2660f26bd225f11ce9d5cf3d1eb3177f71691f9a095873ce3bdf646eb7

Download Submit