c7911806916d591cdfdd82e1ddbcafdccfd7e663e63d6d7f081ff376968935ac | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 01:15 UTC

Sharing

Report Analysis Logs

General

Target

47a5d7a482f98d2c747b37988ec15639.pdf
Size

98KB
MD5

47a5d7a482f98d2c747b37988ec15639
SHA1

347dba356d58a6007cb5c1e3511a30775ec3e153
SHA256

c7911806916d591cdfdd82e1ddbcafdccfd7e663e63d6d7f081ff376968935ac
SHA512

6aa63315c2559c63799a3f53461a5cc20e6d4362f21b5f1c305f48d2400d92a9f214c06efd559c009ad21e32804bfddded3061e842f91ce07d7d31f4f78b2036
SSDEEP

3072:qE0+OzzV71YQkYRZMGSdWUA/7UqmOa2aP6KpX:3IF71YziaGiWUeUTlr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2900	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2900	AcroRd32.exe
2900	AcroRd32.exe
2900	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\47a5d7a482f98d2c747b37988ec15639.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
91e73a271caf5a25dd336b2c2abab6bf

SHA1
b572c8ef391d099f75519c584fa01057045939a6

SHA256
3e8f10b75b45adc055487c9eb76e89da77ada8c2c34a37a4ba9aafe2eb0b9e39

SHA512
2fd19e482b1827225888619e8360fc96f27e4dd162382d12a4b7b6f94410cd37c76c0651b6e0e97dffaf17fefc4d7e44c2af87689155e6626f34b1e825de06ab

Download Submit