00bcd1868e60a1154996a1eae4e2193e99ae910a6150b3e06cee3129dfc00381 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07-01-2024 15:20

Sharing

Report Analysis Logs

General

Target

495698fcb92eae6ef07cb97b218d9352.pdf
Size

119KB
MD5

495698fcb92eae6ef07cb97b218d9352
SHA1

2088cecb812b9016a81fbc8c17256b9132cb04ff
SHA256

00bcd1868e60a1154996a1eae4e2193e99ae910a6150b3e06cee3129dfc00381
SHA512

e661455d5b704f8f6e6609981e50fd753153049b1415f0caf43cc86f283e2b35b6f59cd6b4515a0dc73fb56406e400f4c92150566389fe32d596fe45e226fdea
SSDEEP

3072:JqDzD2uTaruUv13DNiPlCuO9OgTG6sejQnbe+ym5IJl:JIe4Q7C/MsoQTiX

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1396	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1396	AcroRd32.exe
1396	AcroRd32.exe
1396	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\495698fcb92eae6ef07cb97b218d9352.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1396

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
07ceb2304b8a1ef6e95f8fbaeac39f67

SHA1
21ec29ce1240fbbbcfc7f5a6aff5454863322b4e

SHA256
84c1bc62f5a362eefb579aeccc708482e1ce091d08be8a5f5f8061fee73d891e

SHA512
9031b0920073750532d70a455bfd9812f3b2347e8edd42bfe5f50d1c0a1b0085aeabec63ad7dc41b8d0c57f934ed34183dfc03e0c58dc3700297193d4b27f77a

Download Submit