cd98f2e0aa27d9cb43077590b47e3baeab7970c31232edaf3b2743095e0af376 | Triage

Analysis

max time kernel
119s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-02-2024 04:05

Sharing

Report Analysis Logs

General

Target

8e2ce29768604e2b3c834544ecad317e.pdf
Size

66KB
MD5

8e2ce29768604e2b3c834544ecad317e
SHA1

1524c65c69b18cea823e2d2f94d40d8226201c30
SHA256

cd98f2e0aa27d9cb43077590b47e3baeab7970c31232edaf3b2743095e0af376
SHA512

dc30f495c085cfd5580f72abb393ef6a52cd04a233f2dc8b139b879f52725f322065269e0b808826b47e4b6a8b8eb86b5eef865db3c418482480f6510455a948
SSDEEP

1536:pLRqRP7F1Q6RGyHOFVE40N3sLcHZaCFvGTQlqTSXu7:t09GuK5yc4HZaCV4lTS6

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3012	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3012	AcroRd32.exe
3012	AcroRd32.exe
3012	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e2ce29768604e2b3c834544ecad317e.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
6a7e968bf3e5dc7137dd1c5b5252b396

SHA1
2d3e4b19366d3e16aa25e0c5d7f76f91a3e47fcc

SHA256
c979d19351546fa4cf6bd073cca9be8ed689c6070c1d0e52f7064ffb81ebb13f

SHA512
9703e01256ce134b4947236a8d74b0182b0630f2c020ba96b0ab2919514ec7a3bc3493b9ca13d897ac2c16f70fd95eecbbe610fdabc49a0cb23a3c0b33ee52be

Download Submit