fdeff5285efe5f2cb70d66698f791d0b5c33c4e1b9f87e5dfca4d4cf0d881b59 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 08:16

Sharing

Report Analysis Logs

General

Target

4aea2462d5291bf69237acaae1e98dbe.pdf
Size

36KB
MD5

4aea2462d5291bf69237acaae1e98dbe
SHA1

8fd7bcd5601b4e83e7a3a5799a003f80d89f0cf8
SHA256

fdeff5285efe5f2cb70d66698f791d0b5c33c4e1b9f87e5dfca4d4cf0d881b59
SHA512

78546684843064ce2ff3d46ad323ba0256244845f616a61ee0c672bb5542ba224a2bfbe33b001f98f5bb9916ffe032604ca5904c1a744f6569e0ef829474d6f7
SSDEEP

768:/pvjKR7HyATJsz1LldCP36xrGPjOOsarSZvyTGyGY:/pcLT0vkykOO3rHGyGY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2644	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe
2644	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4aea2462d5291bf69237acaae1e98dbe.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2644

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
fab26fa4a24209f9cb59589c101373b6

SHA1
e93f9db809bac0f6e2c82be62dedd83d8a2eb91c

SHA256
1fc733d560ef7dbd3075995182212ed10c3b8e5e0520186727129db9d60d64e0

SHA512
cc28f47e630d765f5b8ab0a01e52f68d2978f0a6caa33977798d0136c5aa37a241921c6101b20c49d8107e93355240cea919fb8380234043feeb8b4f8a9ceaaf

Download Submit