d62a30ffbdaf125492e64108339e2b5707e484ae4c7854e9dbb22d539cba0ae7 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02-02-2024 07:43

Sharing

Report Analysis Logs

General

Target

88f3903a7420ec25984ca0db14290305.pdf
Size

100KB
MD5

88f3903a7420ec25984ca0db14290305
SHA1

6b323689df823d6a42e3a955324917cce9df73f2
SHA256

d62a30ffbdaf125492e64108339e2b5707e484ae4c7854e9dbb22d539cba0ae7
SHA512

8f4d58461bd00f80c45db025e17970a5981fc348889d5cf87ed94a409b5f4152d5096836a6c544f884b054aca669cb4631425c849342a8e3e53fabd6b66b45ab
SSDEEP

3072:WH8gwtp8fhqsRxHE0f4FkLdD3LJc7MCq822:WcSfhq8JRx39qD

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2640	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2640	AcroRd32.exe
2640	AcroRd32.exe
2640	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\88f3903a7420ec25984ca0db14290305.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d7b6ddcfd8d165a6036b2c7b02e82db2

SHA1
8a0a0e383942ac80b6fe36d6f325db7a8f12fcf3

SHA256
f8e29517789d6a143d642b54bb9950bb24ca694b1f923c16b84bff8b963e9ac1

SHA512
9f1fef54bc1bc333173b50c94802681e4693d91d6044bfd7ba1f5cca90a3641b2b016e410d78ae626b161ce5cee1e35fe39b248289170926c9bfe25c061d61fa

Download Submit