512e0b9253e67522c48d58912372f97d3ae75b2db1ac71e1ec8f831ca4d8aaad | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09-01-2024 02:12

Sharing

Report Analysis Logs

General

Target

4d12a08d90404a70c9c1857aa48b3b34.pdf
Size

38KB
MD5

4d12a08d90404a70c9c1857aa48b3b34
SHA1

b61f2b1a7535ab5280fb7399f882e6c6bbf4b2d5
SHA256

512e0b9253e67522c48d58912372f97d3ae75b2db1ac71e1ec8f831ca4d8aaad
SHA512

8c53ba5d6f0463f9300c60c8b47422dab66cab42a7ffac47d0ec1dbf36f82818f782df1d0c0cd26686921ac2cbe01e56c0f269024d80ae3c8a6bbd88482168fb
SSDEEP

768:qgGzpDAXxahZ8XbtRKFCehLU5GSY3ThBnhFeG:3GFMH1eVEm3ThTFeG

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1852	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1852	AcroRd32.exe
1852	AcroRd32.exe
1852	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d12a08d90404a70c9c1857aa48b3b34.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
078a635f902be618632fc53229d0acc2

SHA1
9dcaff66236f03f7e4c26ce037a82e85c71feb23

SHA256
3dfa554957c963eea7a73501df4a033d4a2a95a06df6d29a08935a999601763f

SHA512
b3eb32c8b5dda966646a853906772913c1695673f7ea210f752bc770186661271a6e76946830c991aec48c13bd4731d1fd2694959af1a6442e7c98f759433bb8

Download Submit