9a02fb1d46e504a8e530ab1f3fa5ab0904c19009906078977d30b5f9ef19f67c | Triage

Analysis

max time kernel
120s
max time network
136s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09/01/2024, 13:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4e7491320e0816e5ae14b9c974c5bf5b.pdf
Size

58KB
MD5

4e7491320e0816e5ae14b9c974c5bf5b
SHA1

7a4e36cc205491651d13af75b67d3b5799ca23b4
SHA256

9a02fb1d46e504a8e530ab1f3fa5ab0904c19009906078977d30b5f9ef19f67c
SHA512

92d3b38fac1ab8556b1f705600c1af88496578770041dc835fcf8e110d63385ad8571ab1417679a62ec28da7e4310b91bb94bca8f51e5c0554e1d23d6754374a
SSDEEP

1536:ZBFgQVXQuUt5GSDEV9Yl0sXFwFLFZYWF7GQewAN:7X4nhSGl0+mFLx0ZwU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2384	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2384	AcroRd32.exe
2384	AcroRd32.exe
2384	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4e7491320e0816e5ae14b9c974c5bf5b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
0b17de13ee134963b339b7bd993e8724

SHA1
12cfc4dd3cb5dc0c65b7b133e8c548bf086ac603

SHA256
e2e134a331b7821b3979399dabf98c2fed4bba2b60d29ff0cdcb8d83debf51ee

SHA512
a729bf05e430f5954f13c3b7af09cd30a740fa1c9f32e9069571c36148898b21d733fcc207e17ba8f8a8a7b5b557de16575fcee7ee0af39105f3671c27c25b24

Download Submit