cc18d62b4970d44976ea505f9074abaa42b52c4c341956e801809373957a9823 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
02-02-2024 09:41

Sharing

Report Analysis Logs

General

Target

892e2bb350e77b1721abed5b1c24c95d.pdf
Size

58KB
MD5

892e2bb350e77b1721abed5b1c24c95d
SHA1

f3792cb32b049aa0c4b4f2f5f6c8248d120e80fc
SHA256

cc18d62b4970d44976ea505f9074abaa42b52c4c341956e801809373957a9823
SHA512

30e9dac8548c3bc082bf5a75491adc09487b4f965bb63fb0c9c328e95f2d4e841cb824162be8946d28c8b89f85da12eeca391c1571594c34fa8f060bcc7cf088
SSDEEP

1536:dMzEi1KhKhbaMWHkQht8hSHGVwGhOqyNliB:/i1gKhb+1bHGTGy

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
944	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
944	AcroRd32.exe
944	AcroRd32.exe
944	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\892e2bb350e77b1721abed5b1c24c95d.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
15a1faa76a56b057653eaa580ecadfb0

SHA1
1959c619b57745c53cab2923c5a3d450df439769

SHA256
b23d86373cdcaad63a0f9aeb8052d278e1b16e48637a1738ee702f03f755411c

SHA512
7df448720f422ef2bfd6926c54d0c285cdbd7c698557ef08f5323cf629a279cfae03af0341dc42b9e59497856c936c0f38d0a338f8632425d987b478c0bbdff9

Download Submit