2af6b23edace3948622be5bdc0b48cfb234764a0219b5810ecc27d21ecee33c0 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-01-2024 16:18

Sharing

Report Analysis Logs

General

Target

74f3dd0eac5f124612ec0f661102041d.pdf
Size

111KB
MD5

74f3dd0eac5f124612ec0f661102041d
SHA1

48e0335aab94b7c29fb50a1efd57a4b8958ff041
SHA256

2af6b23edace3948622be5bdc0b48cfb234764a0219b5810ecc27d21ecee33c0
SHA512

829dc66a268ebea2102f5aec93bee3356ea08a60a9b0b8951c5d40d45f61005c859fd375b6037097467693ad37a388dabb1437aad5f5e8866e0029dd84ba0380
SSDEEP

3072:t/uf3d9LdETurnwoTStET0oKfEJtQhoj5gQlVcx:tot9LdET2nD+Y0/+lQ

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2684 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2684 AcroRd32.exe
2684 AcroRd32.exe
2684 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74f3dd0eac5f124612ec0f661102041d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2684

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
cf675af05dccab8751afe8d94cd6477b

SHA1
946132522f29788087ab44253190981b40571088

SHA256
b908586cb5655e4935080a09186ebc58046423b4c2e436d5d8efbf38304a2074

SHA512
ef2b1a918eb8147dcbff3370bf044ce47640bc48456d70ca14f2c0ed8c376cfdbfeb44d7d0c452581fda6290d2bf6c79de81150ebc085133763dd2d034968e6e

Download Submit