f7a324c9c26b586297a608607dc519143b9c49511fbdd05b82a911a5a0508c7e | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 05:56

Sharing

Report Analysis Logs

General

Target

4d8579c593b8f71d3c0472ec67bfb383.pdf
Size

66KB
MD5

4d8579c593b8f71d3c0472ec67bfb383
SHA1

4fa1fc10468a6806afac9f816aa1309ed4620a3d
SHA256

f7a324c9c26b586297a608607dc519143b9c49511fbdd05b82a911a5a0508c7e
SHA512

480930dec5d79039caeec977f4add0962d0e5679770f3acf48ba3e5f8ed36ed11543124f19e5452d545f9c32adda27d8c531962123eeeff6cbbf938b7e58f04b
SSDEEP

1536:WIZkdDOr4i+9iwlq9eLEWSNU3yMccZs+uZ:ZMDOrd8rogLmy3yMOV

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2180	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d8579c593b8f71d3c0472ec67bfb383.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
14ccef229a31c5f72abc1559ca378fb2

SHA1
76501e70d076aa061f96fb67b16d267729268ad1

SHA256
b830464105b06c39d02c812c8b5679a519861793883d7c092d1595bb2e1199ba

SHA512
803525c9149a231436addb3fa443b02f6d18a67821b186507ba69fed8c3e49dce3159f4c8ed4187d7d0043d43143682e4d74b7688bae0a4990046c70ad245b63

Download Submit