370b3231ccd2288e0e7d8f7b21af002583d6de808c9955eb23ab0365237f34a0 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
29-01-2024 02:36

Sharing

Report Analysis Logs

General

Target

7ea89a9a52e9c7df10530ea04768a80e.pdf
Size

98KB
MD5

7ea89a9a52e9c7df10530ea04768a80e
SHA1

4057735c1c3d011dc248423400d7eb637647501a
SHA256

370b3231ccd2288e0e7d8f7b21af002583d6de808c9955eb23ab0365237f34a0
SHA512

0c19d66ceb6f5d30e47902e53ec5f9fbfaf2d2b715cefe6ab7bc72dedb217dfd1cefc76661f53bbee91f420949d3a57bf89bdbace32bd00f2406899187bb44bd
SSDEEP

3072:Q/M2RYIw5ovQkFtj6QGadYMnXvp0bUyO7a:QyavPgMObn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2184	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2184	AcroRd32.exe
2184	AcroRd32.exe
2184	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7ea89a9a52e9c7df10530ea04768a80e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b2d7c023c0a54c84cbb38d4e4dd47ad8

SHA1
7addfed9d4a09ce50282d8558df53625b0d91afb

SHA256
0c364ed008a2b7cf63e45dc50745f17054ba5f45e3dd4dbe5e433808b1c06589

SHA512
360022baf26227933e4af9cc9fb0be688eb6336ca741d1f7549fc48d1ec08497a5ac7afeecf4387505791699e9374deb40d2c1136ca06d146aff29252597a73e

Download Submit