2fedafeb7c6874073a481871999797516fb10c47afcf75ca740c526b8c9fc28a | Triage

Analysis

max time kernel
121s
max time network
149s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 06:33

Sharing

Report Analysis Logs

General

Target

42ff8e2257e05d68731a45827a28d327.pdf
Size

34KB
MD5

42ff8e2257e05d68731a45827a28d327
SHA1

55b08c6bd2b30dc9da5739898c1be2f0b9bda4ef
SHA256

2fedafeb7c6874073a481871999797516fb10c47afcf75ca740c526b8c9fc28a
SHA512

829ba0da31e3e84819349fc45d77c5b7c9fd14e6de2fa3cce03d97dd391a112c8dac2ff91cf7d818bf2478680bda410e527ba9653ba0cb5c3dd225d68066015a
SSDEEP

768:3Rf5mdSAULSF/+iIdMqct2DDeFaNuBIASnLqh:BfcULg+irqccDDeoNuKLqh

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2444	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2444	AcroRd32.exe
2444	AcroRd32.exe
2444	AcroRd32.exe
2444	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42ff8e2257e05d68731a45827a28d327.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
eb82ab34cd9a269d3ed7038d702b80ae

SHA1
699a7bf3815694c225b00984c11754fde8cbb1d4

SHA256
645a75a8071ad64bd92f3a337c8dd3eb1142c4b6967bd75b883de84bf3830b4e

SHA512
dbfa36520b1f38436af289c1ade55458c0d24f959661a038e7f57ae30b8302e520db6fd67242034f44921551548b13b7487d966cead0d7e351ebc07523722a3b

Download Submit