d6778e308abb15e2d3e3da79a71b88f2fc279ca2bc93638f332f8f8e6f5d088b | Triage

Analysis

max time kernel
363s
max time network
366s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/02/2024, 14:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

mnj,.pdf
Size

143KB
MD5

3351f41d3e7e309ae3b10ddc6dc9f239
SHA1

b3141f6c04797b344f1c998e2764abb3f7716116
SHA256

d6778e308abb15e2d3e3da79a71b88f2fc279ca2bc93638f332f8f8e6f5d088b
SHA512

ada54ca834fad52495b3ab13a9e4f3344b0fa1d9e471a3c27f434230973e8e8979c9726d202b4030ee2b3218e807e94b59eeffe2025d4f7e53640f4d6ad0ae24
SSDEEP

3072:9KyWAoCAeSRhBxtKYm2M1heN0tu28e25+Aarao+k4:9hzSRhfcYmFsar7rcn

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1936	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1936	AcroRd32.exe
1936	AcroRd32.exe
1936	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\mnj,.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ed82f61c8eaac266319ff2a8572ddc7c

SHA1
a9f641c131a77163dcd1239922f109aab235fde8

SHA256
2bde929dbef75cdce13dd3087cb082fb73328620bde174f1b9872e9f7864fd79

SHA512
56fa510f587e6420e229bd368c82bf2bf3e4e6814ab3a3e2288126b50020789c28616592ae0da8c43ed853989c241e4efc18d8c2f62a494219e4159834ad0a99

Download Submit