5aca42ad661f417a488f3e32e3b600531504726ed8cee7c246f1d9da9642bd26 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-01-2024 13:49

Sharing

Report Analysis Logs

General

Target

4106c578e5edef268cf1d706103eace9.pdf
Size

100KB
MD5

4106c578e5edef268cf1d706103eace9
SHA1

3d7cba34cfb67004d814c03c79ab3d9d45bcf648
SHA256

5aca42ad661f417a488f3e32e3b600531504726ed8cee7c246f1d9da9642bd26
SHA512

fb1ae7bb17e65546ae07c5fe076d511e4d9077f63db8e1f4dfebead46da8c7013c6f4cb20766c4b154be2d64f1f30c5cf3de2bd0e20540a370da16c4b0cb36f6
SSDEEP

3072:XBCK4OiSPKQn5603FhemBvk3cbDvZpkakR8rtsp:XBzPxE0Vh1Bvks/PkRJ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
760	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
760	AcroRd32.exe
760	AcroRd32.exe
760	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4106c578e5edef268cf1d706103eace9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dc3af73260f6f9ae41bdae933ddaeda4

SHA1
de1ed67213ab147ae28a4546815f93dd2db47bc2

SHA256
501966c12fd9ed0cafec482945ea31339cb1808802d8ead36efd11723e55413d

SHA512
cb317638963443acb7e417d42ba6e86370a746cc405dfecc5e590324c34c51f8e6a88b41a6dd47ca17bd638aa8d930a06c890d45ed8338fe66d49bcf9ad0e3d0

Download Submit