e0862746bf231910f42330791fd58ae239bc7325a7bfcdb42d1bc0fd4b0b406c | Triage

Analysis

max time kernel
119s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 05:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a308f37be4d0023b8f1f16114c7d2244.pdf
Size

102KB
MD5

a308f37be4d0023b8f1f16114c7d2244
SHA1

61eb0be81931c61a9dd8e3cb90cbcc98141136c4
SHA256

e0862746bf231910f42330791fd58ae239bc7325a7bfcdb42d1bc0fd4b0b406c
SHA512

9c2d5fb860a97728251da201b6891c53d8e596d592584df2de65ee426b6217e75da97eeafd26d916b324df7bdfcd641f611bcdc29d8a827d16f92d2366ce64e5
SSDEEP

3072:s1Bmss+q8hilPgrUHllvBs0hswsGMNimcFQsz1:s1xs+nc1jHrBlqzNY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1808	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1808	AcroRd32.exe
1808	AcroRd32.exe
1808	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a308f37be4d0023b8f1f16114c7d2244.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1808

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
bf9f5fc03b0274f62f9903048c0343be

SHA1
8a1d7d53328428392b5cc65795ed95acc4f8ceee

SHA256
883280584eaae6d5348a89d99b2dc52f39ba3cb3f0813543db5ca4f6b54d2b2d

SHA512
b03c3ffd119fa59b19c33da77d21daad84f13d289e1ba633ae014a09b1f1339f1a66e28a106ca094550d3c46f56f92d395b551009f306103f9895e5dec3904e4

Download Submit