20b13d649904280953ee4e9ea2e7da18256fb0419ceee36a20c37c47b7d65bc2 | Triage™

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
06/01/2024, 19:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
470707be05ae6f27a89ae6b0882c299c.pdf
Size 1KB
Sample240106-ycqbaaecgp
SHA256 20b13d649904280953ee4e9ea2e7da18256fb0419ceee36a20c37c47b7d65bc2
MD5 470707be05ae6f27a89ae6b0882c299c
SHA1 8f4fb8b313867ca2afc53f08d661c8cb0c66bf7e
SHA512 a14f4e2ef2d75223815ccfe2d2b094e735b6dd378c893dc72f5902c79275307f8b6933dc122460b87a8611d8403999d622724984329cc937733176c60423a91e
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1764	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1764	AcroRd32.exe
1764	AcroRd32.exe
1764	AcroRd32.exe
1764	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\470707be05ae6f27a89ae6b0882c299c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

SharedDataEvents

Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Size 3KB
SHA256 5db040541340e9c6079e794d31fddbcd69daea75549b3991f844af515147f93f
MD5 01257a35338b13b37cd9b75a05f3bdd1
SHA1 7986865ea7814215c5d6d8709dcb19613acbceae
SHA512 256c03c914373375fd1cd384d4caf227a814f049b7d3e78276160b1b54f2d757e499ee10afe984b79e6569fb6fedad978f245fccc0d5278937abab85083f6b2b
MD5 SHA1 SHA512

Submit Download