6f894c9e635f39aa51f51425226efd109c8ded1205ea2148800a8af0575f8c5f | Triage

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 21:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a2c8f1a29a9cc74bd1b2973ce65b7dae.pdf
Size

100KB
MD5

a2c8f1a29a9cc74bd1b2973ce65b7dae
SHA1

49fb5b4d7e3056d378adf31ba7fc08e002c6f7dc
SHA256

6f894c9e635f39aa51f51425226efd109c8ded1205ea2148800a8af0575f8c5f
SHA512

7c6d15ecee33982322932648a76c90b584b77645ea2b8e4df70fe36057f521567b269a4dafdbb193da88cfe86ab23c269d4c4b4f5d33e00146e99073c3b0817c
SSDEEP

3072:hzTC2UE1eLAUVXHywKiDrwicrakP9Gv2Gn:hvkwcbXy5A

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2356	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2356	AcroRd32.exe
2356	AcroRd32.exe
2356	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a2c8f1a29a9cc74bd1b2973ce65b7dae.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
dcfc2ed41dbb7cc34542e15b583a8d16

SHA1
d6c2795087820ee9868eec7bf900ff29f72c5e78

SHA256
4f96dfa62c001376b3b2760d76adbef01d8e0d8c1f4fde9525d0a8f4314146b8

SHA512
4e919300696460283657436ebbba1ff6fec8520cedc1cfb37001345e60d1b726b8f933a638071040eebea7c786475da6ed0b71da5e32da56350113c1b6eaa34e

Download Submit