f08a57349bf8398b3cd997b3773850dad95f4a84860cfdb314145c084d49b198 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
08/01/2024, 18:02

Sharing

Report Analysis Logs

General

Target

4c1afd4e5571e422079239913ebcd57c.pdf
Size

56KB
MD5

4c1afd4e5571e422079239913ebcd57c
SHA1

8036c99edddffd9c40b48e920640c59785a0e724
SHA256

f08a57349bf8398b3cd997b3773850dad95f4a84860cfdb314145c084d49b198
SHA512

1bd0154dac39c0b7706559a5a7bcb9abf8fecfc00277926b3eaaf6cb9d21044598028ff790d41e674251ad596e5d93a9fade766ec41fb4987257c341552a2e1f
SSDEEP

1536:WVL6uNmJigi3lYUH00BFSwVU2Ooq+JmrJATOM:uWuNOEbH0ucoq+wG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2108	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2108	AcroRd32.exe
2108	AcroRd32.exe
2108	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c1afd4e5571e422079239913ebcd57c.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2108

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a206d61768fa89611d77435d4216b350

SHA1
4e0ad3cc00b9878ece0e4c945c654d3a923d1e72

SHA256
63063a3bd780c11abf01c724d250008b23f42c353507b47bd30643e0eea78049

SHA512
5437798dfb1cf4d1962ea098535f7f04ce19ef2d7ba725fddb3c654e2aa033a656543a2ce953918f5f7b85cc8f5edc229269fe10fc704f96b04ec384e32bc2e5

Download Submit