ee734844f654e42c76b8a06b3b48a1e83dbc0790d349d6e73f40d62b5267c407 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 21:57

Sharing

Report Analysis Logs

General

Target

448901a4b50a7a61d175deeb12cd8cb4.pdf
Size

64KB
MD5

448901a4b50a7a61d175deeb12cd8cb4
SHA1

e051104e36c98d15927f4efb0d8078996a2c9476
SHA256

ee734844f654e42c76b8a06b3b48a1e83dbc0790d349d6e73f40d62b5267c407
SHA512

627ac1177723328beb94c9ee1d8055cb3e754555db91c507f0eb7645b1c3051950228ca0d24eb6ec156dea1711cdb42fea745c7d0d33d5b9fc9d5289ce47ecf6
SSDEEP

1536:VhwcTWZKg+1UXywPiMBInyiLw2SuizmlSdJ49nPDM:ccpgCUdPiMeyaDizm8Uo

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2896	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2896	AcroRd32.exe
2896	AcroRd32.exe
2896	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\448901a4b50a7a61d175deeb12cd8cb4.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads