e5973868a9898cb0aa18553100b3e9ea4de6f87607ae3c0ab4823cdc02e4fd74 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 23:53

Sharing

Report Analysis Logs

General

Target

aa786b7552ee408639683c9716e63a90.pdf
Size

97KB
MD5

aa786b7552ee408639683c9716e63a90
SHA1

0db43438ed69427b0720d0b09a704ed7e7e2a384
SHA256

e5973868a9898cb0aa18553100b3e9ea4de6f87607ae3c0ab4823cdc02e4fd74
SHA512

89416a68f7a7843a699af2b90f27d4fb87f69d5092de5315fbbfbc2e71900b5c6c635f0b94e617f9e3bc6aa40f1e3f7dfb225b0f99a5370ffb30c84ba275babb
SSDEEP

3072:EmuawmjhA1W+ZjHiHNx3/KYdak2maHOUaza:Emu4jOBZjut+

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2992	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2992	AcroRd32.exe
2992	AcroRd32.exe
2992	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa786b7552ee408639683c9716e63a90.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
b40019ef00c7511a2cd4736a190d4d26

SHA1
b7569b837189d6c280eb17ed356a837e44eca7ca

SHA256
7adaa1998c7cabc5c43f19fb317a35d8726c5913c72a28431f279cd634357a24

SHA512
75b0638eaa2861261a468fb981674035dfdeadce0cd46bac7951002f82c95eb643ef913862c7011146fc5272894ed40e179cba4d4878a28feb89451f984c74fe

Download Submit