f40bcfceaa7c550beb9c4a93751f640d1d4c56bd62639d9f432be580339b14d9 | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
12/02/2024, 15:34

Sharing

Report Analysis Logs

General

Target

9781277ffd829e606b9930c112acc362.pdf
Size

99KB
MD5

9781277ffd829e606b9930c112acc362
SHA1

5c310e97d86ea1cb7b65f0fc51a0188135bd061b
SHA256

f40bcfceaa7c550beb9c4a93751f640d1d4c56bd62639d9f432be580339b14d9
SHA512

1c891e6b609f605c8881dbef803824d903fa41aa0445a08ae098338e6702ee44cc440a249f5a05ae12634be1db53c1d9ba62b455b9d4ee773a16a6dbd27bb38d
SSDEEP

3072:da7sCKF3WDEiFgfwzgNrePAztz+BlFZ8QG6H:da7sdF3WA3IzAeWmH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2380	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2380	AcroRd32.exe
2380	AcroRd32.exe
2380	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9781277ffd829e606b9930c112acc362.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2380

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ba9a74fd20c266fc83a06c5906867b02

SHA1
cba2b51d641e20a1001c4f03232aecfc488faf3d

SHA256
a4ebe090ff9f131d8f034a3419d483ab455da31ba4cc7489640d6f9eff391d10

SHA512
fe2182186cc764d32e4fa3f3717be876ffa94246942609bba751d92c54a9ee7499ec46a65b4c4f8ab28666acba64e566427fdfd8110e4c37b2f0ed592aa18ccc

Download Submit