1edb207972170150cb6b0cf43ffcd93dcf450a696670808be4694ebe373f8f3c | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07/01/2024, 17:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

499dbc3df9f36148c5bf211413f409ae.pdf
Size

164KB
MD5

499dbc3df9f36148c5bf211413f409ae
SHA1

1af7506065c63bcd044037bf64ce6f71f2d44028
SHA256

1edb207972170150cb6b0cf43ffcd93dcf450a696670808be4694ebe373f8f3c
SHA512

b1ba7b16c19255c75e8c205cc38ee03e96b05883e3f44901485f0da015ae1aa9a90314e7ee41c3c1f132a64ba2ad8425d3682698c9519a0914e7e26572e25cf1
SSDEEP

3072:CvDV3K1FjkG4RqwqFE2Wiq6n6bcKjpLfFwEPvZK3rez8:P1ZcqJ+oWbcKRf07Z

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1032	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1032	AcroRd32.exe
1032	AcroRd32.exe
1032	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\499dbc3df9f36148c5bf211413f409ae.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ed86e123e891ea81fb81d0c18dc412fa

SHA1
2e25cd9f55bbbacb08178f142fe09cb220da5dbc

SHA256
430585e29f90b10d80cf02ff9380661b5dfe034e9123b53a25a1938414527696

SHA512
323c07b330a5d7fc80ed11b14b613fd6c828ab2c7c9259629ae084bbf8efbec8f9774ee6caef83eeb510e95a472a1513375709c09585e5e8e1604c3bbce069ac

Download Submit