2e0268e98d7d73bac2fcd7dcb0b90ef6670411f27b470e1a9371bd0b38fb4e65 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
03/02/2024, 08:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8be244d1f2e86ce4b81ea6897bdfdc32.pdf
Size

49KB
MD5

8be244d1f2e86ce4b81ea6897bdfdc32
SHA1

acff1cdafa274076403d014f9edc85dcca34ab7f
SHA256

2e0268e98d7d73bac2fcd7dcb0b90ef6670411f27b470e1a9371bd0b38fb4e65
SHA512

c6f87fb08033646ae41346c2e1b082eda451f4d57a0c5951d96c2d58b340a0f5fdfac3fdace71cd6a233e051e391a929b935e9a072cc73857a86ebc463e83881
SSDEEP

1536:3iNl4RO+xnN4Ln3Xr9uirdN6eZb5YA9hye8:Ws15GLnHr9phN6elKOhye8

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1972	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1972	AcroRd32.exe
1972	AcroRd32.exe
1972	AcroRd32.exe
1972	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8be244d1f2e86ce4b81ea6897bdfdc32.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
54e1e50b446a2a7f6e686e530d737c4e

SHA1
55dadf114d294c556903d8a8e4cbe24959b50dd0

SHA256
8336644d147992d53c14690c77a150b45254b29ed15f9c13edfb8d0c2fa958e1

SHA512
e825a91f468b7e5d771b8e7f45972b6ab99e9bedae66b4faa13912716445b37fb3867591c5f05e63305c79b1489f5bbac48dc63c7618f1936f118c96e68f08b9

Download Submit