e9dca39809de3b7e1390d11b0a557b73375204eeef94a3a3544395cd165f2467 | Triage

Analysis

max time kernel
117s
max time network
119s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 10:10

Sharing

Report Analysis Logs

General

Target

409494c871316e2e640a4d0a1f8d996a.pdf
Size

81KB
MD5

409494c871316e2e640a4d0a1f8d996a
SHA1

b2b416e82c4e61eddca94adb8f7c5f1dfec5e292
SHA256

e9dca39809de3b7e1390d11b0a557b73375204eeef94a3a3544395cd165f2467
SHA512

9915db1ea784387caf60f3d5fea829d15a6ac7d4d23b6fd197e9c1fe4a497d422700a5e5fd6068514d418ed5d95c039a51b8dd578db8b572408820c208fb774d
SSDEEP

1536:JVc9OcdlJDbhmQvNIUJ5cX5qDNf8VgidaHJnLx:5cVDblIUS8DNfALdapF

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1460	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1460	AcroRd32.exe
1460	AcroRd32.exe
1460	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\409494c871316e2e640a4d0a1f8d996a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads