e7ea6d06ce476a7fc97b3c8df1016c68fe28690c7632eb4d4d2db3d5b2efadbd | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/01/2024, 07:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

740b6d964a0ccbd0112c3182e06a24c3.pdf
Size

34KB
MD5

740b6d964a0ccbd0112c3182e06a24c3
SHA1

9fa0ae1d43efe50db06d59cc2aac1ad42ab23900
SHA256

e7ea6d06ce476a7fc97b3c8df1016c68fe28690c7632eb4d4d2db3d5b2efadbd
SHA512

79f60e319d41578b990f62f5606b43f0bd2cbf3e2952de9d904489f7d21eeaf3d3ac6488bf06434d217fd98a78b785d1a1e2a8dbfb155fe364148251487d4603
SSDEEP

768:OK9opvvsFgQbbSKBdqCaG50zTWhRr7llJVnnVxc:x9+TrCr0zTGLNnVxc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2284	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2284	AcroRd32.exe
2284	AcroRd32.exe
2284	AcroRd32.exe
2284	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\740b6d964a0ccbd0112c3182e06a24c3.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
60254cdd8fe2a4e7504583e2c372fd7f

SHA1
ffd4ead26691034717d9c6f806864577c52d7b1f

SHA256
af2f4b780a5e5edd7d1fb0654b97a6066bb7f85d0357d8d9b8578e4b24c1e6d2

SHA512
486ebb4acf28d701d33fb4f211aabe8dcc9e9538b77a227f66464a784394fe0a6b4ade78c6d8daaea12dcfc834d71e6d68aef1fcaea4ad5aeb0486f503c662ef

Download Submit