2d5a4102659371372a8dfc215f1346b424538db5f83088c0953291588aabbfb8 | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 05:32

Sharing

Report Analysis Logs

General

Target

a303e149391794441456af574e0ab9ca.pdf
Size

102KB
MD5

a303e149391794441456af574e0ab9ca
SHA1

ce6cc119b90f7700f1239594253ed02751e5d990
SHA256

2d5a4102659371372a8dfc215f1346b424538db5f83088c0953291588aabbfb8
SHA512

65e62177a4f8a3dc14ea0cc39fbae9751ff2b56ba68a20bc59a9d507fb42ad818804f996bb4ca65be0e5f3afdc0ccb47fd0582213820c793e7b873ba149d21b2
SSDEEP

3072:SJQWYVMy1djryjBs79eadg+rSgx/m+87GNecltz:rP/rABsxeajo7GY+t

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1096	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1096	AcroRd32.exe
1096	AcroRd32.exe
1096	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a303e149391794441456af574e0ab9ca.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
eb67359126211e2ed2477690da5e2d6f

SHA1
cf00d3485ee8ff0db43a2db35907a9e0fe3cdf04

SHA256
81172718bc41b874bf248a63e12be4f373440908c2c81594ad989244a15d4ca0

SHA512
a17f63a8007fd358bf639dfe64f75f31d5a56308222710e31beb304d32fc1b0814334c46cd4fbe47bfc615aebf36d52caac328a33984b2d4359a6194afcc1882

Download Submit