186641b5099cfe0aa144055edd042f7d1d7c97359833581767d2b119b5eef025 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-02-2024 03:19

Sharing

Report Analysis Logs

General

Target

8e1574c4b8ec81c621cdb3746dc876e5.pdf
Size

214KB
MD5

8e1574c4b8ec81c621cdb3746dc876e5
SHA1

51638189ec43cb1c79b982f4629f649e7fb6f202
SHA256

186641b5099cfe0aa144055edd042f7d1d7c97359833581767d2b119b5eef025
SHA512

398f726d9cef5123640d25cf1706cb589a082e294c56d418d11b8d463ad1efe37afbdffc03989b1d239256d3f5c67a9826582e6b0067ed0770778bf35f0901a5
SSDEEP

6144:SV8l3tuyoAoDEpKCD3Q04Zn6vvI2OJK8K/:SV8l3AooDEFq6vvvSK8K/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1928	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1928	AcroRd32.exe
1928	AcroRd32.exe
1928	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e1574c4b8ec81c621cdb3746dc876e5.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
48c21b65b0fe80683964e5c8e16be813

SHA1
ff85ab5b719d0b71d9dbc122d582cc658165d49c

SHA256
9810de03c3e10d42a6e6771fd5dfde62a0f0dcf47eb12bbe4b97d4702a5695d0

SHA512
cd2a8d72f3f7f2e684a3ac9c6de03fc3081cf032f22455d97268d94716e075de96b6c9434c0a1c0011096bfc10059c8666441785a0d4d7f51f7efbadeecde68b

Download Submit