933a3bfb1917d9ecd17b17bd18abfc6faeadd06c1b3fdea324a3956d87977ca9 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 00:34

Sharing

Report Analysis Logs

General

Target

4790f73339c8311ad9bce766da4faea3.pdf
Size

119KB
MD5

4790f73339c8311ad9bce766da4faea3
SHA1

e07eeed225a0067e2415fcbb97195370da562285
SHA256

933a3bfb1917d9ecd17b17bd18abfc6faeadd06c1b3fdea324a3956d87977ca9
SHA512

197d91dbe9d13de52ea2bf8988794bf24aedc75b3bb6bfc956c8aecd6dd9cb2a971556ed86e1ba4838c12d8591990a92652a8633798582530919865e2ebbea74
SSDEEP

3072:orF3s5EspePr0xf/vGOU37fBbibFtQacyq:oB3s5EVIxfnGOUmcb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2772	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2772	AcroRd32.exe
2772	AcroRd32.exe
2772	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4790f73339c8311ad9bce766da4faea3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0a72dce6ea48b7f56ed0e341b987a3b7

SHA1
2213b6839eb914f1462c89050c9e5c938aa78bab

SHA256
2d3288a818de770a1264e07f8654b4d59758a6c4bc48efa6ec8b6ce33648da4e

SHA512
d1ee68c57d7ad2e00a4a2c3280cf5cab6526f8001745e280a1f73eb8bf7a15e8a12699e579bec962a0b7f4388b16b4ac49f4e32fe71c1b0cd6ec7dfbd87f9f0a

Download Submit