6e7202e8cea90c1ea72485a112a441d3d506f3430fc5cab5d0b500c8d4fb37c3 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 03:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4d31e58a7d41808b42ef11f6e8bd9593.pdf
Size

12KB
MD5

4d31e58a7d41808b42ef11f6e8bd9593
SHA1

433347900e71cceb606a68ab0284ab970c5b561a
SHA256

6e7202e8cea90c1ea72485a112a441d3d506f3430fc5cab5d0b500c8d4fb37c3
SHA512

76f0e0b4b61df313485fc902de9061302d4a86c182b0c4c2b55f1f8a38979f2cc84800754acd7985a0fd10816ad321a03ca118fc9aaa655ebc012a628804b791
SSDEEP

192:1Ko8PB8ES6sYs7BpEvrM37AudZUYkwC9mlXUYrfJ4R:8o8WL8vI37AIkw0m9U7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2988	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2988	AcroRd32.exe
2988	AcroRd32.exe
2988	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d31e58a7d41808b42ef11f6e8bd9593.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b7e20a569608e1b5ae0eba6e71e918e7

SHA1
912b35ab0f16b8285fdba27d1c5a3bd18d4e0254

SHA256
01401ca159a60be96dab70eed5060823fe420bec50fbb8fe5250be8580daa69d

SHA512
2a0c5af76defaa13a21e5fdc628f20e0a15751cba82fc9368e3c22836eee63bd4d8830c6753fa8a4ece522c4c613bb65182a1aa8309559a7c7db9fb01892c77a

Download Submit