7e533b4d1dbc721d47eeabb482c6b3ea13dda5c2185a35531f3855b74883aaac | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
07-01-2024 08:14

Sharing

Report Analysis Logs

General

Target

487964c7fc419bb627a0710abdbe7258.pdf
Size

135KB
MD5

487964c7fc419bb627a0710abdbe7258
SHA1

bc6498e18c6ce56c90e2d9cb47d9b0155f83d18b
SHA256

7e533b4d1dbc721d47eeabb482c6b3ea13dda5c2185a35531f3855b74883aaac
SHA512

b33bc2ba2f7137b9f7f0958c5f7f90fba9c75ef21d3610e99f1d6d7da8c31c0fb9e61a4cbe0ab1bcfb368f62b0d47c4e08fd86ea2a2c7de1c5c26bef69d9dff5
SSDEEP

3072:etfc9TIEyhLHxl0r+uvnAq2iQx6a3k8hZ6YWt0q:etkWEELc+VR6okj/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
880	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
880	AcroRd32.exe
880	AcroRd32.exe
880	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\487964c7fc419bb627a0710abdbe7258.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
f1c9bea600ba41723166ab4395938681

SHA1
9760fe7649ca4bbd58ed922ab2040d08719b776d

SHA256
29da5c2f32be806920c10db4b7e3853722a186584b3caa285bd1c0789f7f1c21

SHA512
bc1088e02e3364c1d8aa9f84b9de9106782b825bf3553c11458e52176c1d8bff5e38ba9d8b5950e1edd74e1c033d6fce21adab92632967b73e56ec25ab5fc082

Download Submit