eece1296bcbab5df314de6952f64e19f3aaa35f6280b369ba0b673b44c8bff37 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 18:41

Sharing

Report Analysis Logs

General

Target

a27a02a8b442ae801cc690ccf137cdcc.pdf
Size

72KB
MD5

a27a02a8b442ae801cc690ccf137cdcc
SHA1

b2bc096f9cbfc47b06137d70a5f3f12907ffbdf2
SHA256

eece1296bcbab5df314de6952f64e19f3aaa35f6280b369ba0b673b44c8bff37
SHA512

efeaf0560cee846fc6f6cfac64f4e7081805c2b1adba7b9a91d77013747b98fa26ed8d2d3b92ccf2e825604db7f11f3ede2a0ad4ccb4727da1937a4339e6dc33
SSDEEP

1536:/Ww9PQ6vmzpki63AB1kbADu6A38C0BYl0lh1yqV:uwvvCpkDnbffWYl+/n

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2484	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2484	AcroRd32.exe
2484	AcroRd32.exe
2484	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a27a02a8b442ae801cc690ccf137cdcc.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
a90cea41973d3ec928b522e68c47df4f

SHA1
690d34427ac8c2acf77418becd0d91b89e2e2728

SHA256
39dc926c9f8caedb05a843a3e8742973f29d7f3f1f1dbda695328cd8f736dd66

SHA512
e2565fdc71d857c2e05d5ab8894d97ded571e7c1b8f9c2f4f734bba08ce181a7fbe09e5ddaf8cac77c4aafd51e769c29a2f75ca562bde7dfca27d2a7c3ffc23f

Download Submit