4d2a63f095fbf3731a198cd304e174a18c50a89432c724559dd42ddc547c0d29 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03-02-2024 05:31

Sharing

Report Analysis Logs

General

Target

8b853197b32a44fb12f7239ab6bcf892.pdf
Size

104KB
MD5

8b853197b32a44fb12f7239ab6bcf892
SHA1

e9d5ba58b9bc77e1e9dadaf4b075e283b78a80ae
SHA256

4d2a63f095fbf3731a198cd304e174a18c50a89432c724559dd42ddc547c0d29
SHA512

27f470bcc3e62f329f5c1f93f012f95a86a83c3e95d0a814ac663e6c5e9ff5140f2e82e439ec02fc1f65b0ced491932337da33b3b48f93c5ed47ca358323fea4
SSDEEP

3072:vqmlyie8J/DaIk4xFZ/hb75nqXd9WRfgyp+qw:vqMe8J9x9b75adUap

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2880	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2880	AcroRd32.exe
2880	AcroRd32.exe
2880	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b853197b32a44fb12f7239ab6bcf892.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4b505b894c395e3952610f766868b398

SHA1
dda689d21e9aa58df821695a790fce1f10434ccf

SHA256
76d39d5be9fc92673eee589feb7c03705fa8b094a18e3ce95c25592a2f22d42e

SHA512
4a1240cd2a47969ea77f86e9fc44fe3b9a0624494867c5d2f41c1022b6ddb8def5f21b1f17c583c405acbd62795a32bd6c61cf02158b9fa3e138451a612dfde5

Download Submit