4bca96cd7612a5da6dbf4d61f49b4586a9b4bb25e3249c8a5822c94d362123ee | Triage

Analysis

max time kernel
122s
max time network
145s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 04:37

Sharing

Report Analysis Logs

General

Target

42c635aab23c7403e527894b0b69d2e7.pdf
Size

126KB
MD5

42c635aab23c7403e527894b0b69d2e7
SHA1

e01c0d292296b473b3d88f672d144b53f466ebaf
SHA256

4bca96cd7612a5da6dbf4d61f49b4586a9b4bb25e3249c8a5822c94d362123ee
SHA512

6a57ccc3d49f72191c227559d6b0ecec60178aa9d19bc805be233b053738699af35b0061aadd19a70be9ae45711bd767cd02a7edeac505b7b187c8be9270156f
SSDEEP

3072:ID1QfTlH/EMHmj/7kPCrht6w0PXiw8/NT0H5APEq:RVckmjwPQjF0PXiwzg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1888	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1888	AcroRd32.exe
1888	AcroRd32.exe
1888	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42c635aab23c7403e527894b0b69d2e7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6c15a40a9b5d63ce50b7addc79eb2b68

SHA1
0f3e305bc3efe865996f524a9b35b85dbc9f0779

SHA256
b2dc973f8c3e21a5a9ae7ff51ae2684d2f072091b5b619c0a1d48e731080073a

SHA512
b9beff9daf3ac5d191208323b8df08dde83f85af8a8523a9a47236088f39df7f20b00639f180d179e5ffd8a74dd9e91a4badfadf9f3564b8d0c92672799ec58d

Download Submit