40db47b546169d080212f9ae9a872f6bd2f2bb8e14add86c237baf1c0ee9008c | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
11/01/2024, 18:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Tableau d'activités 2024..V9.pdf
Size

300KB
MD5

1ff4eff4ce0eef259adbe86218a8c9bb
SHA1

4567b860f2ac5a69f1a6ac170cf1670b18c3400f
SHA256

40db47b546169d080212f9ae9a872f6bd2f2bb8e14add86c237baf1c0ee9008c
SHA512

fb0cedf67d45a488f094900bf08867d0cb6ab59dda94af74a5cfe3a57f11a352285de55cf86783f2d35ae5da674f388bd46b06a8199c40c864d5f85b90263d17
SSDEEP

6144:ctX7mmvPQuLMGQaxkCJKT985N39gf1CKeWo/iVkLv9:cR9vPhMGQaxZwT985d9F/i+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1764	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1764	AcroRd32.exe
1764	AcroRd32.exe
1764	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Tableau d'activités 2024..V9.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b0461ca6c46d4ac587690cdead628a79

SHA1
79567933abeba48ca264817cdb0f869b59499910

SHA256
bb646811b01c75ebfa03d0f056d4e0cc4426b68e7bd958b5a9f8f96172324459

SHA512
67a34474d16a73a26c927d325d7140180c7b42e678b1ad6caab9ff59723309ea5ee597b1bb5e45465686c985c1ca2c1bf7a79556239caecffb4626660a4fedff

Download Submit