c78fb8bd3dcc7b32f4a0a9bddaace854d20acff303b4c30f2823293e8b333a8e | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
10/01/2024, 09:51

Sharing

Report Analysis Logs

General

Target

com/sk/lq/general/web/pdfTemplate/Za3500.pdf
Size

29KB
MD5

223b41ea2083862e08cbb4a3b1f3f543
SHA1

108cb782c383a37e75178429f7c981a10a098ab2
SHA256

0f31c8eb6d9874e5f05ffa4465e9f20ba0ccbee62f7e7997350ac2a1986d4e13
SHA512

4c237e2722da85d3167fe9e1c524da23464227c65f9b7ae039241e6b6dabb441a7180d541c964d5e8adc6ca78a3f11a9f187fb64b72156f732263bba89aaaad4
SSDEEP

768:iRY2vVO86ATIaTTmQcmTm4eGzfoXWJCqCrEU:M886sFTTmQfeGzAXB9J

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2220	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2220	AcroRd32.exe
2220	AcroRd32.exe
2220	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\com\sk\lq\general\web\pdfTemplate\Za3500.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5bc98a1c4696a3f405d475120cb6724e

SHA1
1b5f87465cf04f68ff349ba8e1deb29028ecd49f

SHA256
fcd71d4b58623b5fb5aa74dcbf77a4a25b1044c2996d6296667521818f0e7e83

SHA512
e18f9a69e100cae87350d5c422d6b2b64bd3ac39da1a79a2bb5ad71f1c44edb8084e40b81cb6d2c1fcc0de4762611da20049825787ef0922ac7b5eab0f03fe16

Download Submit