551d1a987e308b748fd790c2ede3b8a63d54bccb53a9cc292c725ccd4a6b1c2e | Triage

Analysis

max time kernel
119s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 22:27

Sharing

Report Analysis Logs

General

Target

8d82e80e296dafb374021ef96a0041bb.pdf
Size

68KB
MD5

8d82e80e296dafb374021ef96a0041bb
SHA1

deb274e170f77fea282e1876a9167216e2a080d9
SHA256

551d1a987e308b748fd790c2ede3b8a63d54bccb53a9cc292c725ccd4a6b1c2e
SHA512

3a50109bc159c0eed6ff603c6bd3b0377e87936d8517a5b77e8421e6b2c62c807ce2e9a8613c298a6947c055bc24c28d15821f0936d24b9941c70b46c258b9ae
SSDEEP

1536:EGainQNsImSTrgBtRoZqIR+jNYq5xIx/cg4eZ3fg4Rh:EFr80iyqa/0eZ3fgS

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2148	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2148	AcroRd32.exe
2148	AcroRd32.exe
2148	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d82e80e296dafb374021ef96a0041bb.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a88b03c33b5f9e80d5a500308b474da6

SHA1
a24ae0119a6c89b2ba315b765b5eaa18ebd5b77e

SHA256
57db9189188c956beaaa3e26680058a902091d0c75a7f9dd49d005a91152940b

SHA512
d76492f66bb2e344e5b8db4bbbab8dc2ea4a332cac8659ddeeac1d4f05480a3901a6284d102cce0b1821a4e6c4a702c018c46c0860586e0a7290aaba836fdae2

Download Submit