cd49f5f3582d7e12ce6ab141f0706e27062bfb5e4cce31a69bab269927b96518 | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12-02-2024 09:34

Sharing

Report Analysis Logs

General

Target

96d6d0d9e536cd7be2ea250bc7646f72.pdf
Size

67KB
MD5

96d6d0d9e536cd7be2ea250bc7646f72
SHA1

77ec7401ebcd8c6e78e249a4cb2a609c1dda513d
SHA256

cd49f5f3582d7e12ce6ab141f0706e27062bfb5e4cce31a69bab269927b96518
SHA512

c824d6ba5d335c25514ffe44b2c1e642ad16553ddae890de45beeb6dd2b0a79259211831f0caab3381d83e05590bf36a5d3942683db32bca9dca4e09b0d1c0f0
SSDEEP

1536:MTn1aagCdM5ZzWJ9s+c//c/tzTOCk59EYmi:0Uagh5ZCJ91c/0/wx+G

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2912	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2912	AcroRd32.exe
2912	AcroRd32.exe
2912	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96d6d0d9e536cd7be2ea250bc7646f72.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dc5c96d7116a10580ed657f2f251406a

SHA1
2a9f34a27e23a0816341b28eb8c68ead6a66a2cf

SHA256
e1f1098d4f9efffcfdb0aab291d538f9591f1d56c29e4e07a88c383788ff2571

SHA512
cefc42524177b91462b5fb1f4ec45fcee67a4c6f72e794773f1bfd46fbd8b981a02cf2b1ac8d124b86b7dcea922e800e2a9a3b381aa7ef17baa30da88ba6cb81

Download Submit