a68a4f853c46847bac37a885c1d21bb565722fd8dd3f427bf0bed8d16828ee11 | Triage

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 21:26 UTC

Sharing

Report Analysis Logs

General

Target

8d6341a671b1cf3122115fd4e867b567.pdf
Size

97KB
MD5

8d6341a671b1cf3122115fd4e867b567
SHA1

285528d8e9576ae3712851135dc0df1a0dda5ce4
SHA256

a68a4f853c46847bac37a885c1d21bb565722fd8dd3f427bf0bed8d16828ee11
SHA512

dac59ab2008e0d8a4da60a07469661a6196dfb8934b2fba21356ef064a6ab38f8e8d579193055c789b273abf49156e99649f0267f894795fd8b92de2831106a5
SSDEEP

3072:aRhXgtnWHkxFlzeYFwTQUCtsP7eymu/oJEv:ahEWHAFoYFwTQ52/d

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1604	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1604	AcroRd32.exe
1604	AcroRd32.exe
1604	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d6341a671b1cf3122115fd4e867b567.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c4df3a9cd0ec2e8339c65898604c200d

SHA1
338af6ba911a7cafaf9ad01b134ae26364529489

SHA256
bf94cc769b6042130c8dc1db894a913baf5cdb2e3cd35ddac27aff1b7c23bea4

SHA512
3cb2a5484e0575d711f56e11dbbfd7f52d38dfac5a5435df7a3e00905afbe16c2fa0f350d36064027d0abf70de52d8ab517a954c7d5aef858f19e905170e1927

Download Submit