cc933502945e2593e456519b71dd54bcc3dad7a21409ca51faa3d1d97bce84c3 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 23:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

54ee8c99871efc782893657591f9bd58.pdf
Size

44KB
MD5

54ee8c99871efc782893657591f9bd58
SHA1

96c31709587cbc1b1bc450e3c2c3445837dff72e
SHA256

cc933502945e2593e456519b71dd54bcc3dad7a21409ca51faa3d1d97bce84c3
SHA512

8911f2d506a69056dd428444ddfd466896d9413031d10f39306d772338d49e9923d59b22f1416ecd5f01352efe2cde74c0b458ffe68a3a58a316f4b43088930d
SSDEEP

768:z/meTcXds/X6pJbWkQoVofcGTXQ5RkrL/LzhbVTo2:laZZQoaEGT1rrLzhbxL

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2140	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2140	AcroRd32.exe
2140	AcroRd32.exe
2140	AcroRd32.exe
2140	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\54ee8c99871efc782893657591f9bd58.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2140

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
279ff5ccc9acfebac002f616c2f7b241

SHA1
5a4c34172d775690ca10faab652bdfa07410cee6

SHA256
ff56db2ec1e114bf672206890bd7c6b7173255de99294c81858b4e234f0876ac

SHA512
bbf6a56116f1dc340a3a2e441d5b9f87fe0d31f3996aa87f11cc7e6979e8236bd861825eb71df667942115628692e273a71eca97fc51d72fffadf57392824c61

Download Submit