a96a56f14d0ec4eec0543792633eb4f5a4ff0358aba47668126ddd47b9608715 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08-01-2024 10:37

Sharing

Report Analysis Logs

General

Target

4b35b9520973cf3fef4983db98d78271.pdf
Size

15KB
MD5

4b35b9520973cf3fef4983db98d78271
SHA1

b4d57ee9676c2c5c592cd3359d4d0b1ddc02b6f1
SHA256

a96a56f14d0ec4eec0543792633eb4f5a4ff0358aba47668126ddd47b9608715
SHA512

c1e7f9e7db1ace1de866ffbe065bf5cf250289412b71f53e0e30092680e40e75909995324ac7684e6f8486a474ae81ddbba4457755f40157f5b604fdcb7a78f5
SSDEEP

384:riWCLbVViusrZLBWYk77vM+HKiXn3neZDhpKU:rvV91dWYk77hZuDhf

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2500	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2500	AcroRd32.exe
2500	AcroRd32.exe
2500	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b35b9520973cf3fef4983db98d78271.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5d53eb266faae8e03fab05e575c124a9

SHA1
7fdc017826f3fd59153d8f1e6587497c424db7b5

SHA256
17b7a4a341ef9cb3b9959dcd920a05bc1e1e92bac673cbf02845bb8e78f804ce

SHA512
e375217a8bd7ba4f723b04cdda1766020111e4740952ffe89084c3f57d91b88c468aa6b32469076f725e2141b55f2074a560d119484632e340c70f1b9ad95bab

Download Submit