625d4bf121c8e34d8eaba60c87562fd4b87589273f1b827dd4ac323c26158f9b | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07-01-2024 14:33

Sharing

Report Analysis Logs

General

Target

493bc947889e18b3a073b7b684e52630.pdf
Size

110KB
MD5

493bc947889e18b3a073b7b684e52630
SHA1

579d31fcc27145c73d6f9877b3c8c14d61ed2d06
SHA256

625d4bf121c8e34d8eaba60c87562fd4b87589273f1b827dd4ac323c26158f9b
SHA512

720dd237fb5c42a9cdc3e91b7c53228d2d414cc4e9a5250160872d97fabe924070d2044492d1622656c31876fd57e0873b3cd8a2bb393c0df8fe512a53d9c0c5
SSDEEP

3072:szO55VgthYdsA6NsQD3lAAfMiF9O9RKrK7c:557sYdJ6NblaiF9hmg

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3036	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3036	AcroRd32.exe
3036	AcroRd32.exe
3036	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\493bc947889e18b3a073b7b684e52630.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c826287f1708503ba5f4f2b33654d2d1

SHA1
bf10e01c84af2296290c645b349e5fbf9ef851bf

SHA256
aec07f8205de62f3d97c29dd76eb78ca54f801567b3c8810b56f533bf04b4cd7

SHA512
1e0c1a6ad7ad6c4e2d393111883ec809554c9144227656fa1ddf30bfdb10f42fef7054eef74699c5751357c32bcca0fd9820d74871a60f8af10f179c0076faba

Download Submit