4e8caedaf07ed80a94bda0d73966d9ce83f421ab7606700544e157d987b9e1c9 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 10:10

Sharing

Report Analysis Logs

General

Target

a19b74c3fa8fe4bc796033064904b1ae.pdf
Size

33KB
MD5

a19b74c3fa8fe4bc796033064904b1ae
SHA1

2bf6134c6e9fc21204ece7ac9d847bc1498df7c7
SHA256

4e8caedaf07ed80a94bda0d73966d9ce83f421ab7606700544e157d987b9e1c9
SHA512

bd4c5256ae1e5e97e400ebd65222ce350041e2e0b87375d9b8277fca112a36d8940bcbc111cfb38e64f703134c34d23e12d5ae3dfa2ae5736852c15239b4d8b5
SSDEEP

768:5K9IQxsq5b7F4ByJ/wtKuf1g+ygA3De12fT8jC:5WI0ZF/hd/PcwT8jC

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1744	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1744	AcroRd32.exe
1744	AcroRd32.exe
1744	AcroRd32.exe
1744	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a19b74c3fa8fe4bc796033064904b1ae.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c29011e1815fbe50f58e403ce6baeeba

SHA1
e496f92115342ec1bb38b1ab9b9340ec38abac6a

SHA256
9acac396fb1439ec629e23c25b9c56456eb51266ce4722fe9c098cf11fc8c16f

SHA512
e7de35b1c75e007f1de630008849eb6658df4d09a4586f5e828a9f957c62669ddead597a68a7df57b8ef5908f3227d55fcf3a8cf723c08ece863a1a63a45c089

Download Submit