8dac84f54ef24c4f1b2f1885794d977bb5479adb5f568b3b6f19c408a43a2279 | Triage

Analysis

max time kernel
122s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 08:51

Sharing

Report Analysis Logs

General

Target

a1732bd11b01a303e78e298690597d75.pdf
Size

29KB
MD5

a1732bd11b01a303e78e298690597d75
SHA1

a80c7873334b636a3e9d3e8c5a938668206a42fc
SHA256

8dac84f54ef24c4f1b2f1885794d977bb5479adb5f568b3b6f19c408a43a2279
SHA512

f97685fcaa086d29fd00d47e5a8b245210c73718f4af9114aaf4eba897df370df545afb7074fa940e23f88c762a9cff47345d2d7ea2ed0b884936909fd361ba6
SSDEEP

768:ObZsi8mG33NlCggPzhqRrdhBacdVx2mjsgfWG0wvp:oZsjg1qbrxp2mwuvp

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2680	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2680	AcroRd32.exe
2680	AcroRd32.exe
2680	AcroRd32.exe
2680	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a1732bd11b01a303e78e298690597d75.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4c4336c1d74fd1b1063d35a5f9f01036

SHA1
f7738838df0dc27a5799f5ec8ab7a6a1a114f706

SHA256
3733737d7c3bba5644660e2614aad650d0afb0ea52395aba8cc16117f3a12c05

SHA512
179af3a57cb19cb5239bc95ccdd91137b25397a9acebf94a03797cdb93f2566a9abb1f303d70c1ee7d1721e227ee01b6be72434e902b7e92b4d91a22855d9690

Download Submit