f65feecfb10b1dd11a5a142723ca7ae793b9d4dfceaeaeefc1e6529fd604f657 | Triage

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 17:59

Sharing

Report Analysis Logs

General

Target

a265ca97faebdadd8a9058118103acd7.pdf
Size

136KB
MD5

a265ca97faebdadd8a9058118103acd7
SHA1

84f1a94c1112d3c843e44c92dd303b6f86718d51
SHA256

f65feecfb10b1dd11a5a142723ca7ae793b9d4dfceaeaeefc1e6529fd604f657
SHA512

54544b982c7705fbc5924a22ef5f3950ba5837e475461db33e4b4a51cc2943d1ce13257e455579c77320f58a3b700eacba81aa658d4e959f2347ab6226ac2691
SSDEEP

3072:tf5ZUeAgAutoHFREzoVWhO/i6ARLM/gViqTJaSsQq:tf5fDAYoH0okE1esB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2724	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2724	AcroRd32.exe
2724	AcroRd32.exe
2724	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a265ca97faebdadd8a9058118103acd7.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
644f8d7811a4f4669ad46f62bb262286

SHA1
ccb15af647d46a672aaf2cb600b66f1297cbee25

SHA256
83f8743831b60db88c6db3bfa135a8056aa4826ca52491b4c139e14010c7fdba

SHA512
854787a4895ecd4b26520e50605c8f26c7c45a4ab87eca0c43cd4395672406656554e0dfb6d8b4e83fb5c9ab3c79ecb7ff210c927c25d908b84e0c02398b861b

Download Submit