4c88a6f5267ef13cfdffd2ce764da5efeee7b363951bae6379d0917ef34adda8 | Triage

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-01-2024 20:24

Sharing

Report Analysis Logs

General

Target

41d3657f96eb6596b1a763884099903d.pdf
Size

43KB
MD5

41d3657f96eb6596b1a763884099903d
SHA1

0817949f9c6b8ff0f2305f81ac941a9371c8ceb6
SHA256

4c88a6f5267ef13cfdffd2ce764da5efeee7b363951bae6379d0917ef34adda8
SHA512

4a1868cdaf7468c8f9a3ad02b7edd75a6c6f398d9b1525fcd99c9cab3690fe7f28a69e856bba95383191df041b5d4d55a52bef71f8cd6770ee0331e003e8fb05
SSDEEP

768:oyx2USsZvQ6DZ7H0zeal+N1WZhw9vTPWo90W4IVfM:Lxxd7pGfQNkQ9b19sIVfM

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2632	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2632	AcroRd32.exe
2632	AcroRd32.exe
2632	AcroRd32.exe
2632	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41d3657f96eb6596b1a763884099903d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1cf3d411a0ad1b5fa85387f96691b333

SHA1
199c15ee45770e6a3d7ea5939e297d2dd7f38fc4

SHA256
bb81f7346ae7f3a5c5a37a936b326aac0822a371c4dea60a30d9011f3e9c42ca

SHA512
9555f00d9782bcd2d4bbca6a0889eb4bc819571feffb0a15ebcd2174925e0688a45a86f58e69f2559b84b12055ba910e8f6c18481e902c76c9181029081bbba9

Download Submit