1e0d6c91507bbf4966fb041851a4ea27eb7432ff332071482e25954ed3ca3ec2 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 03:37

Sharing

Report Analysis Logs

General

Target

a0d92f92f7702dda6f3f2008f8d4c5c1.pdf
Size

96KB
MD5

a0d92f92f7702dda6f3f2008f8d4c5c1
SHA1

03c6543236ae5c7923c6c2d8a141924b88665da4
SHA256

1e0d6c91507bbf4966fb041851a4ea27eb7432ff332071482e25954ed3ca3ec2
SHA512

e41cc35a22ac0786c88a8709afc66ca9a14576e7eedee2b15b82d4c91a02e9f29048bb262702da8ce7ac5df244637fe0e6393e2fe9be82a8be1a44a33d47f203
SSDEEP

3072:LUGiOffIC6T1pTpf6gvqx9HoPTFK1/O/y2:ffABfrwV+K6J

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2204	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2204	AcroRd32.exe
2204	AcroRd32.exe
2204	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a0d92f92f7702dda6f3f2008f8d4c5c1.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
26c764846b3f77431eb3a52a6ac5ae41

SHA1
52c7cad82f3e860429e41335408637ca62d1796a

SHA256
40a30ba267693aecbd64df0b5ba55a64c3e1f7a1ab5f17f22a3ca9adecc946c4

SHA512
42b38dae5e83890e883a5c0975ff3223449c3ad8dbb189ede6d4346ec5b99c4891dd5ed503e4e9572fe4912d36e56e4f6ed3fadc8407b36f62d7819f607858eb

Download Submit