6a84d4052c231398e6f4a9c4e8593943eafd3ce6e2350457fa2665954305cdfa | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06-01-2024 18:39

Sharing

Report Analysis Logs

General

Target

46ec6ff6cc6bed4216a9a99ce89012cd.pdf
Size

71KB
MD5

46ec6ff6cc6bed4216a9a99ce89012cd
SHA1

d8152d88d33dd4f5e2d9e3a0475d1fc77c391d37
SHA256

6a84d4052c231398e6f4a9c4e8593943eafd3ce6e2350457fa2665954305cdfa
SHA512

52659c15e952082a06df91acd5b6883e80d29e9fe7871c210b369a864ba7d402fd1153e9859b73a733eb22ae1b183f490ba3e46fe003d91fb247027c6ab66be7
SSDEEP

1536:2q/TtkxAgA+DcD4ri+/WMUtOZWBxCt/KOX9Iu1j+izz:9btB3fD4GOZWBbgIe+I

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2556	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2556	AcroRd32.exe
2556	AcroRd32.exe
2556	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\46ec6ff6cc6bed4216a9a99ce89012cd.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0a53f071cef36a6c7d205c00559d8033

SHA1
0ab85476c1031f58eaf59a16a800e8dac858bde2

SHA256
cf88e4b119618aa45f2b5868a31e24fd290bb217c834aa88fe7323fe50dc6556

SHA512
2124fbab84899aa91ee63bfac200cf2f743abe6d1c04f9591123b8feab02a4a963a774a24846a565ea96f2523ea583b29735fa2e4c9df5660a9d7a4617b5f1fa

Download Submit