6b8f04d5bdadbddfa9e9a98cb0e633e6a7ccef53bcb12bf76c79323426d074f8 | Triage

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 08:22

Sharing

Report Analysis Logs

General

Target

a3502d97c4c9f94b2359365fa87c742a.pdf
Size

104KB
MD5

a3502d97c4c9f94b2359365fa87c742a
SHA1

4aae673f268942a346e9ede0bbbdd4a2ef6eb98e
SHA256

6b8f04d5bdadbddfa9e9a98cb0e633e6a7ccef53bcb12bf76c79323426d074f8
SHA512

0ada75ee46099f5b4f7174c666b5816aa7bee63cd941535381ab93e8cba92284e0ef6b01b6652b74d4bad2d0f08b342eb6b00d4da36342645a7f371f74bc50d0
SSDEEP

3072:AuJxIqMve67UGbLifshvUytpi3/CKIBvhKE3lf5:tIqogG34svU4s3L+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2744	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2744	AcroRd32.exe
2744	AcroRd32.exe
2744	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a3502d97c4c9f94b2359365fa87c742a.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
1a042fdfa4c5492aaf95668cb5376bf1

SHA1
f31fb5129e116c984db9e17a8a1d55b557ee66a7

SHA256
ad8057833c31a1a72e3c6c3333b1feb4095a08ca48d6685fee6d086810af608e

SHA512
16a73a8a29fb2de053b078148c0f2d574bc125f54da4ba5c5e3db43ad07daf000586885077357b624ddb3dfceaa08acbc25dc95b83da244684881324786417f2

Download Submit