9cc2b12f36a238d9236ee7ff8ba646f21abfc2909302605ccc658508932349a3 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 07:02

Sharing

Report Analysis Logs

General

Target

968fcc1da225abe700a080c331f42408.pdf
Size

96KB
MD5

968fcc1da225abe700a080c331f42408
SHA1

f336830ab643f4417aa498b78b1e3c44ca9b1ffb
SHA256

9cc2b12f36a238d9236ee7ff8ba646f21abfc2909302605ccc658508932349a3
SHA512

7f0112f275c8cebfd1894c8449f97017e5e1bd41a89d3f29e07511315f373690e225373ba7090ffca07ec1c643b8bd696cd7768b67fb569aa69bc74fdb452ebc
SSDEEP

3072:DVeKsJ5UdJwRpMwjQqDs7pTlNXSwccIBmU:52OdGRiyo7HdSb3L

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1480	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1480	AcroRd32.exe
1480	AcroRd32.exe
1480	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\968fcc1da225abe700a080c331f42408.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3769b2731d9b89b1ae7a1d18de7b1a3e

SHA1
847085fcdccd01022a3a7acee2bce1acc972f35b

SHA256
f7094b87be4edd10ed50195e8c229641a65d95590f4329289be9af4b4611c5c0

SHA512
74e130d638dd667b37588b44ed121026d5736ee041f948b428688727fa8aa638029a0a7a56e8ad654a2f3a3092785178c53def6716ab84135ce207ceaaa0dd11

Download Submit