fd6a9de13ec434cd9c231c94aaf752ff6400dc880be67c6ca12ce134e2a42a5d | Triage

Analysis

max time kernel
104s
max time network
27s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
05-01-2024 10:02

Sharing

Report Analysis Logs

General

Target

436622622bfe441e3dc73ca886a37000.pdf
Size

96KB
MD5

436622622bfe441e3dc73ca886a37000
SHA1

c691cfd05bfd81c1bc23f32396b7d3fee0b04624
SHA256

fd6a9de13ec434cd9c231c94aaf752ff6400dc880be67c6ca12ce134e2a42a5d
SHA512

c39ddb0af90a2391c5b8bdd7c24b9734400c816c4eed627e58614782b2ccbcdba12a55ce1cf34ed4d084e9ec29ac9b3d7cca4ce733657eff7ddf20e5a4dfb5d6
SSDEEP

3072:Js3tFLIWIqwHMM4augORHHnA9/QNivyB82x:JYhIXpxTORHg9/DvyB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
532	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
532	AcroRd32.exe
532	AcroRd32.exe
532	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\436622622bfe441e3dc73ca886a37000.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fc0e812285bfdfcaec08fb19553941a6

SHA1
af216779328a66b73cca615f434f4cb196ebc194

SHA256
b529b63ef75adb0bc674625d63beb5e7001b2fc3abde5bf30a47f7b7d1f8e6ab

SHA512
d1231259c67f8c69f19878bdc364ada99b64a3b53155f789791abe0b5e62ea0747543e5165565c5bb23b9608e2c2eca871e1dfc3306f88a7235f469247caead2

Download Submit