4a1bc09d142e3fa458a59e01935f9f3fbf9488789fa815726fd43bc371c430d0 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
09-01-2024 15:59

Sharing

Report Analysis Logs

General

Target

4ebd8565869125a4e43d7b26536da2bb.pdf
Size

77KB
MD5

4ebd8565869125a4e43d7b26536da2bb
SHA1

281011094275885891a90da292db546a75f997a6
SHA256

4a1bc09d142e3fa458a59e01935f9f3fbf9488789fa815726fd43bc371c430d0
SHA512

49d1e1e61113d3aac6d779621fb6ace4e08839c216f538648fa71120e0371874f10e78a69817c769db85b7bf242a99afb3dd000b2c61556f5a7a165f7c38c4f4
SSDEEP

1536:uPWZqDY8sEATPJmmKYFfP4sqJ65rskWNria/nCgXZsq:noY8C4mnfHxQPxzvCA3

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1840	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1840	AcroRd32.exe
1840	AcroRd32.exe
1840	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4ebd8565869125a4e43d7b26536da2bb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9e80f4f6bf0efc2efdaf8cded74c484f

SHA1
d626137c010baf3e894d0027bd023932d1e3a8a2

SHA256
f077a960ccb8b4a520fe3cdf70e1ff41db0a144595898bab8cb83e658370e949

SHA512
4d3a4c326d82b34f3e819d39fc4b7806f67c9602239af7cbf4e6cd1964ea5dfab41aa58375ae55be3b5a7301726de10b21b7ef8441d10030838a0716f32a77fd

Download Submit