d3e197094d9829b4ef845b98f1209100d549170ac099428cfdb46c7b6cd72825 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 05:30

Sharing

Report Analysis Logs

General

Target

8b847ed8432f56747e762b3faa3f1f77.pdf
Size

99KB
MD5

8b847ed8432f56747e762b3faa3f1f77
SHA1

6e3fa16a1c71196008f8976e3bff64e22246887a
SHA256

d3e197094d9829b4ef845b98f1209100d549170ac099428cfdb46c7b6cd72825
SHA512

d3d2bebd2e476f03c3a3846826cc669ad65a24afbee863e62804589f3ff20746b0e2a67cbe4d9931302e858e3b1a3b7fae43eafcbd2dd624a73fde5088d26478
SSDEEP

3072:vA887azgIEfgbQBDr12Bj7PMdjnqAezvHy:vEGzgIEfgbQDr1Xdjnd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2180	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2180	AcroRd32.exe
2180	AcroRd32.exe
2180	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8b847ed8432f56747e762b3faa3f1f77.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e42ccffe30d958337de521885ab25138

SHA1
abcd418418d17714196438e69115855119aa052e

SHA256
6ac877667713e37e7c944c54b66f2368dc1d748e0c47e8b8e00fc8eb50e70af4

SHA512
dd8057b8e1565c2eb5f44b26e7447e3a6344bb5b7c509aeed8d210db23a0c5f6ae5c715fa649f848bf3739e89dc83235d1b8c99fa69e0e11c2d6f0f35e710a19

Download Submit