9c421bd1790fd8254a4bcc8ed9300a181ba4fdc73f5753c750ad06359ee8ccfa | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-02-2024 00:28

Sharing

Report Analysis Logs

General

Target

8dc19bdd9267cb84dd2c0d054b0bd7e2.pdf
Size

108KB
MD5

8dc19bdd9267cb84dd2c0d054b0bd7e2
SHA1

eaba9325cec630402f1db0c17522065dbf04f040
SHA256

9c421bd1790fd8254a4bcc8ed9300a181ba4fdc73f5753c750ad06359ee8ccfa
SHA512

6a89a25e507325773a95d7fedf72faca008174fce3fce00d3761ac3a324dddfb351dc529e5468864544bc838a73d849b0966baec6738799175f8952af13f811e
SSDEEP

3072:7ywe95HX+xxj215Bq6Lwdm+11qhPAKyH8yDA:2wn72Nq6Dtz

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1900	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1900	AcroRd32.exe
1900	AcroRd32.exe
1900	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8dc19bdd9267cb84dd2c0d054b0bd7e2.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e8eef7703ac7340783b675eeffe910c7

SHA1
1ef697a4fe30135f8f4eb7d8bcb2aca6bf107ae7

SHA256
a40d8e545c2696d28065c9c153ec9922666162300e689da1a170086935b5fe31

SHA512
8f008cd97e998a24ed09f3fbd8cd6080cd159171622c54da618abb86df6b6fa17153bd6b863d609df5816619ec478e6a558efa87309620e453c37d0981905ed8

Download Submit