0c475d3ac78e2b56cf39a751885e3c6c9917c366dbfaee659aa2dce4670c7143 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
24-02-2024 18:17

Sharing

Report Analysis Logs

General

Target

a26dcb7d0d645c9b3290483c9eccfcf0.pdf
Size

34KB
MD5

a26dcb7d0d645c9b3290483c9eccfcf0
SHA1

921fdab1d6273782a4f72519033750b3f6d0d83c
SHA256

0c475d3ac78e2b56cf39a751885e3c6c9917c366dbfaee659aa2dce4670c7143
SHA512

7104eb7cf62eae859b4a9c2514fcd2bffde4e10e810d68fd1b9c974599e7bb93457464e3825f76ea65e2e54e57c3ff044bd29f036e5aaaded89b56532ef43a2f
SSDEEP

768:Kt4C+BrwpGUos8xA9ZyRwJFeRkx9TV6UCdo4dIs13n:6NBGnsyueRWQFtX13n

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2460	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2460	AcroRd32.exe
2460	AcroRd32.exe
2460	AcroRd32.exe
2460	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a26dcb7d0d645c9b3290483c9eccfcf0.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
5cf0d9ca38a44972c0cf5b59c1c3ec28

SHA1
4b9b859847ceae1a5d4d81ce7b4fb6a50779b491

SHA256
2414ffa3755c5a474d9e121e15b7e309124a3fb57fc9699a0268c342b0f1d9ec

SHA512
db638d2b6c59db46f8a4dc9357afd858c2478d205ebe63f4a43a9093fb7e4286178f6060e770159d27c38abec7e5e06b4618a290a950c1701d99735d0dd1cec8

Download Submit