575d97e1543e2252a67ec633e10921ef4ed2bbf7968db5de3cb49d1a647ddb0c | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
27-02-2024 16:00

Sharing

Report Analysis Logs

General

Target

a9906150873816ab2b0b8b2be1e07e2b.pdf
Size

99KB
MD5

a9906150873816ab2b0b8b2be1e07e2b
SHA1

36751516b2a6487f45305e46bc14847f87d2d8f9
SHA256

575d97e1543e2252a67ec633e10921ef4ed2bbf7968db5de3cb49d1a647ddb0c
SHA512

4ee74db2f6e3611310808e2e2ab63d1228a5b80100b1e8fd3673f8a535bb0d82636a9fbb6fefe3800b5f9284156b07c9fd3b654ad40e462127167821e474c12d
SSDEEP

3072:1e/b0GfekJYYvtH+N7IaimKq42hPLwac9i1:1ejpeXYvtHEv+4

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2440	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2440	AcroRd32.exe
2440	AcroRd32.exe
2440	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a9906150873816ab2b0b8b2be1e07e2b.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4000de0cf937e966526ebe55eea2accb

SHA1
b8cfe60d196578195a656b1ccfa958b490110471

SHA256
df7c7bd23e5a28807e5ead6c781a269553173538d10cd726e384ede709c89242

SHA512
fac8936f5405f792ee4f1ecb92aa5396dba5dc7022427bb174910ec6909d7c91d504f872f28552325100a6fbd8776ebd0a74de966b9cf1a3ef327924f669d8e9

Download Submit