749ba6de1b71f5de73990ab25252489d75a8acbcce7d5e821ef728a773738f68 | Triage

Analysis

max time kernel
118s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04-02-2024 20:15

Sharing

Report Analysis Logs

General

Target

900dc3f1244eecce8986e46d33e337ce.pdf
Size

33KB
MD5

900dc3f1244eecce8986e46d33e337ce
SHA1

eca03ec605322a3059f14421f89512771e3d24aa
SHA256

749ba6de1b71f5de73990ab25252489d75a8acbcce7d5e821ef728a773738f68
SHA512

f8ded121dd2a67b5ca09fa9f2aa586937174f13fe05acb3ffcebc3807f191383c538de9cdf123a75eefb86b792ce0296e1cbe157848dffeaa01feac154b462ee
SSDEEP

768:sxKsXdApQWW4JrhnCuS09aM5Q9pf2olNpANwXjlEoU:sbdRWWswM5QNlMNwzeoU

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2344	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2344	AcroRd32.exe
2344	AcroRd32.exe
2344	AcroRd32.exe
2344	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\900dc3f1244eecce8986e46d33e337ce.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
183efcfc59df48001e8f29ecf6746fcc

SHA1
3533e12471d39fa6d5363868bc5166d243d6e3fa

SHA256
dff0a31802ac936871af9bc76cb79c082a7778c9d3ac4e0efee0df95902be745

SHA512
92e767c90255dce6d9421c02fdc61eff43b13904c34672465e194e646af74380a0b1706fb69f58c5fd4b96e758a19bec393aa5be4b5577aa8b823a9a309bd56b

Download Submit