244682ba4871f3dc2c9b6ad78917295d1caa7af058313c1b13871c5214f27a18 | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
02/02/2024, 10:43

Sharing

Report Analysis Logs

General

Target

894ecc348a87d581b3cbce2952733088.pdf
Size

105KB
MD5

894ecc348a87d581b3cbce2952733088
SHA1

5957038764e1db5f960c0acabe53fbeb3f7a28b6
SHA256

244682ba4871f3dc2c9b6ad78917295d1caa7af058313c1b13871c5214f27a18
SHA512

c7b120e055a907761f70870ac593f49af2bd7a6fcaacf015bde3d160bb790a095236312d2dfc648359f003920ed1b7aa13a5a5e9a9c685e5390c7a0ca62cf30f
SSDEEP

3072:lunYCZwStCSrPrESvlP4E7uhJS77p++7in6p2f17I:eYCWAprjE+3+JS7t+Y1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
836	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
836	AcroRd32.exe
836	AcroRd32.exe
836	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\894ecc348a87d581b3cbce2952733088.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:836

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
7c7f73774ad2f3113d890448ce74c0f5

SHA1
b80c2624064fdbdc08fadc96812475e80d570d58

SHA256
e7d0ddd18d44b6d70222fefadf79a1d26b25a554b4a17423db5b0bf0febbad71

SHA512
14b51127a6d3dbd70741a0399c13bf6f4069b9fcd1cc848d0c919e1b77979f86a8c533b70331248c0c69fd02d32d035810a99970df1a1a8a7d5edf826b7f6cfb

Download Submit