5544e1422507b76d93b45e7f27088424de7ee6c6696a5552cd3c2454172afce9 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
05/01/2024, 03:03

Sharing

Report Analysis Logs

General

Target

429971be9929c260c1049696f92f2c1f.pdf
Size

35KB
MD5

429971be9929c260c1049696f92f2c1f
SHA1

994dbab9eda37e934c3e7e493705d66135b1f965
SHA256

5544e1422507b76d93b45e7f27088424de7ee6c6696a5552cd3c2454172afce9
SHA512

08547121be4259d9b0b68da9789463f2b5c44151852f5d5c2bc0fe7b462a2601c0222ff0eb409f9b1b5a1c2c6ca6987a81f7ed3c9374d1d4bf9a66405fb1fa25
SSDEEP

768:XqNon/UdLs6lWBwbxm2rlfUYTupp5gYbgzef3MmH1:XqTU+xm2rRQp2wf8mH1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2176	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2176	AcroRd32.exe
2176	AcroRd32.exe
2176	AcroRd32.exe
2176	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\429971be9929c260c1049696f92f2c1f.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2e7c2d3d5ffee620a28089c1dca8449e

SHA1
1e697cbdf887e1665a315ad5ae0d0d0bd505296c

SHA256
1739abb777b2cd93e61f336905da5a88b55fedc465d22f836f33e3918370756c

SHA512
7b8f56937422b532b9f9a0e9b93f649e70e8b9cd1a8bd4708338d56aab15499ed277c4000fa2c3c73672b64e5da51f8e127069f10112a474d3ff3f43146e1e2c

Download Submit